diff --git a/docs/architecture.md b/docs/architecture.md
index 4be532de4..823e72853 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -9,8 +9,8 @@ The `cri` plugin uses containerd to manage the full container lifecycle and all
 
 Let's use an example to demonstrate how the `cri` plugin works for the case when Kubelet creates a single-container pod:
 * Kubelet calls the `cri` plugin, via the CRI runtime service API, to create a pod;
+* `cri` creates and configures the pod’s network namespace using CNI;
 * `cri` uses containerd internal to create and start a special [pause container](https://www.ianlewis.org/en/almighty-pause-container) (the sandbox container) and put that container inside the pod’s cgroups and namespace (steps omitted for brevity);
-* `cri` configures the pod’s network namespace using CNI;
 * Kubelet subsequently calls the `cri` plugin, via the CRI image service API, to pull the application container image;
 * `cri` further uses containerd to pull the image if the image is not present on the node;
 * Kubelet then calls `cri`, via the CRI runtime service API, to create and start the application container inside the pod using the pulled container image;