diff --git a/cmd/pinniped/cmd/kubeconfig.go b/cmd/pinniped/cmd/kubeconfig.go
index bceccafa6..611d3ba6b 100644
--- a/cmd/pinniped/cmd/kubeconfig.go
+++ b/cmd/pinniped/cmd/kubeconfig.go
@@ -1,4 +1,4 @@
-// Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+// Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 
 package cmd
@@ -1116,7 +1116,7 @@ func selectUpstreamIDPFlow(discoveredIDPFlows []idpdiscoveryv1alpha1.IDPFlow, se
 			}
 		}
 		return "", fmt.Errorf(
-			"no client flow %q for Supervisor upstream identity provider %q of type %q were found. "+
+			"no client flow %q for Supervisor upstream identity provider %q of type %q was found. "+
 				"Found these flows: %v",
 			specifiedFlow, selectedIDPName, selectedIDPType, discoveredIDPFlows)
 	case len(discoveredIDPFlows) == 1:
diff --git a/cmd/pinniped/cmd/kubeconfig_test.go b/cmd/pinniped/cmd/kubeconfig_test.go
index fb37a2a05..5c8273de3 100644
--- a/cmd/pinniped/cmd/kubeconfig_test.go
+++ b/cmd/pinniped/cmd/kubeconfig_test.go
@@ -1712,7 +1712,7 @@ func TestGetKubeconfig(t *testing.T) {
 			}`),
 			wantError: true,
 			wantStderr: func(issuerCABundle string, issuerURL string) testutil.RequireErrorStringFunc {
-				return testutil.WantExactErrorString(`Error: no client flow "my-nonexistent-flow" for Supervisor upstream identity provider "some-oidc-idp" of type "oidc" were found.` +
+				return testutil.WantExactErrorString(`Error: no client flow "my-nonexistent-flow" for Supervisor upstream identity provider "some-oidc-idp" of type "oidc" was found.` +
 					` Found these flows: [non-matching-flow-1 non-matching-flow-2]` + "\n")
 			},
 		},