From 6ec0d664d94aa125873f688f8ee084d8b657c160 Mon Sep 17 00:00:00 2001
From: guzj11 <67083623+guzj11@users.noreply.github.com>
Date: Thu, 10 Dec 2020 17:55:33 +0800
Subject: [PATCH] Update kubeadm-certs.md

sync wit english version.

Apply suggestions from code review

Co-authored-by: Qiming Teng <tengqim@cn.ibm.com>

Update kubeadm-certs.md
---
 .../docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
index fb66b92b9b..62c98eb990 100644
--- a/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+++ b/content/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
@@ -80,6 +80,12 @@ point to the CA certificate and key.
 否则, kubeadm 将独立运行 controller-manager，附加一个 `--controllers=csrsigner`
 的参数，并且指明 CA 证书和密钥。
 
+<!--
+[PKI certificates and requirements](/docs/setup/best-practices/certificates/) includes guidance on
+setting up a cluster to use an external CA.
+-->
+[PKI 证书和要求](/zh/docs/setup/best-practices/certificates/)包括关于用外部 CA 设置集群的指南。
+
 <!-- 
 ## Check certificate expiration 
 
@@ -448,4 +454,3 @@ kubeadm 并不直接支持对 CA 证书的轮换或者替换。
 
 关于手动轮换或者置换 CA 的更多信息，可参阅
 [手动轮换 CA 证书](/zh/docs/tasks/tls/manual-rotation-of-ca-certificates/)。
-