Merge pull request #25599 from tengqm/zh-sync-kubeadm-certs

[zh] Sync kubeadm certs command reference

Author: k8s-ci-robot

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs.md

@@ -1,13 +1,17 @@
 
-<!-- ### Synopsis -->
+<!--
+### Synopsis
+-->
 ### 概要
 
-
-
-<!-- Commands related to handling kubernetes certificates -->
+<!--
+Commands related to handling kubernetes certificates
+-->
 与处理 kubernetes 证书相关的命令
 
-<!-- ### Options -->
+<!--
+### Options
+-->
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -21,16 +25,16 @@
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">help for certs</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">help for certs</td -->
 <td></td><td style="line-height: 130%; word-wrap: break-word;"><!-- help for certs-->certs 命令的帮助</td>
 </tr>
 
 </tbody>
 </table>
 
-
-
-<!-- ### Options inherited from parent commands -->
+<!--
+### Options inherited from parent commands
+-->
 ### 继承于父命令的选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -44,12 +48,11 @@
 <td colspan="2">--rootfs string</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">[EXPERIMENTAL] The path to the 'real' host root filesystem.</td -->
 <td></td><td style="line-height: 130%; word-wrap: break-word;">[实验] 到'真实'主机根文件系统的路径。</td>
 </tr>
 
 </tbody>
 </table>
 
 
-

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_certificate-key.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_certificate-key.md

@@ -2,30 +2,27 @@
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!--
 This command will print out a secure randomly-generated certificate key that can be used with
 the "init" command.
 -->
-
 该命令将打印出可以与 "init" 命令一起使用的安全的随机生成的证书密钥。
 
 <!--
 You can also use "kubeadm init -upload-certs" without specifying a certificate key and it will generate and print one for you.
 -->
-
-您也可以使用 `kubeadm init --upload-certs` 而无需指定证书密钥，它将为您生成并打印一个证书密钥。
+你也可以使用 `kubeadm init --upload-certs` 而无需指定证书密钥；
+命令将为你生成并打印一个证书密钥。
 
 ```
-kubeadm alpha certs certificate-key [flags]
+kubeadm certs certificate-key [flags]
 ```
 
 <!--
 ### Options
 -->
-
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -53,7 +50,6 @@ certificate-key 操作的帮助命令
 <!--
 ### Options inherited from parent commands
 -->
-
 ### 从父命令继承的选项
 
    <table style="width: 100%; table-layout: fixed;">

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_check-expiration.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_check-expiration.md

@@ -1,23 +1,20 @@
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!-- 
 Checks expiration for the certificates in the local PKI managed by kubeadm.
 -->
-
 检查 kubeadm 管理的本地 PKI 中证书的到期时间。
 
 ```
-kubeadm alpha certs check-expiration [flags]
+kubeadm certs check-expiration [flags]
 ```
 
 <!--
 ### Options
 -->
-
 ### 选项 
 
    <table style="width: 100%; table-layout: fixed;">
@@ -59,8 +56,9 @@ kubeadm alpha certs check-expiration [flags]
 </tbody>
 </table>
 
-<!-- ### Options inherited from parent commands -->
-
+<!--
+### Options inherited from parent commands
+-->
 ### 继承于父命令的选项 
 
    <table style="width: 100%; table-layout: fixed;">
@@ -82,5 +80,3 @@ kubeadm alpha certs check-expiration [flags]
 </table>
 
 
-
-

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_generate-csr.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_generate-csr.md

@@ -6,39 +6,46 @@
 Generates keys and certificate signing requests (CSRs) for all the certificates required to run the control plane. This command also generates partial kubeconfig files with private key data in the  "users > user > client-key-data" field, and for each kubeconfig file an accompanying ".csr" file is created.
 -->
 为运行控制平面所需的所有证书生成密钥和证书签名请求（CSR）。该命令会生成部分 kubeconfig 文件，
-其中 "users > user > client-key-data" 字段包含私钥数据，并为每个 kubeconfig 文件创建一个随附的".csr"文件。
+其中 "users > user > client-key-data" 字段包含私钥数据，并为每个 kubeconfig
+文件创建一个随附的 ".csr" 文件。
 
 <!--  
 This command is designed for use in [Kubeadm External CA Mode](https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#external-ca-mode). It generates CSRs which you can then submit to your external certificate authority for signing.
 -->
-该命令设计用于 [Kubeadm 外部 CA 模式](https://kubernetes.io/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#external-ca-mode)。 
-它生成 CSR，然后你可以将其提交给外部证书颁发机构进行签名。
+此命令设计用于
+[Kubeadm 外部 CA 模式](https://kubernetes.io/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#external-ca-mode)。 
+它生成你可以提交给外部证书颁发机构进行签名的 CSR。
 
 <!--  
 The PEM encoded signed certificates should then be saved alongside the key files, using ".crt" as the file extension, or in the case of kubeconfig files, the PEM encoded signed certificate should be base64 encoded and added to the kubeconfig file in the "users &gt; user &gt; client-certificate-data" field.
 -->
-然后，应使用 ".crt" 作为文件扩展名将 PEM 编码的签名证书与密钥文件一起保存，或者，对于 kubeconfig 文件，
-PEM 编码的签名证书应使用 base64 编码，并添加到 "users &gt; user &gt; client-certificate-data" 字段。
+应使用 ".crt" 作为文件扩展名将 PEM 编码的签名证书与密钥文件一起保存。
+或者，对于 kubeconfig 文件，PEM 编码的签名证书应使用 base64 编码，
+并添加到 "users &gt; user &gt; client-certificate-data" 字段。
 
 ```
-kubeadm alpha certs generate-csr [flags]
+kubeadm certs generate-csr [flags]
 ```
 
-<!-- ### Examples -->
+<!--
+### Examples
+-->
 ### 示例
 
 <!-- 
 ```
   # The following command will generate keys and CSRs for all control-plane certificates and kubeconfig files:
-  kubeadm alpha certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
+  kubeadm certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
 ```
 -->
 ```
-  # 以下命令将为所有控制平面证书和 kubeconfig 文件生成密钥和 CSR :
-  kubeadm alpha certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
+# 以下命令将为所有控制平面证书和 kubeconfig 文件生成密钥和 CSR :
+kubeadm certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
 ```
 
-<!-- ### Options -->
+<!--
+### Options
+-->
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -52,41 +59,41 @@ kubeadm alpha certs generate-csr [flags]
 <td colspan="2">--cert-dir string</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the certificates</td-->
 <td></td><td style="line-height: 130%; word-wrap: break-word;">保存证书的路径</td>
 </tr>
 
 <tr>
 <td colspan="2">--config string</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">Path to a kubeadm configuration file.</td -->
 <td></td><td style="line-height: 130%; word-wrap: break-word;">kubeadm 配置文件的路径。</td>
 </tr>
 
 <tr>
 <td colspan="2">-h, --help</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">help for generate-csr</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">help for generate-csr</td -->
 <td></td><td style="line-height: 130%; word-wrap: break-word;">generate-csr 命令的帮助</td>
 </tr>
 
 <tr>
-<!-- <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td> -->
+<!-- td colspan="2">-kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Default: "/etc/kubernetes"</td -->
 <td colspan="2">--kubeconfig-dir string&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;默认值："/etc/kubernetes"</td>
 </tr>
 <tr>
-<!-- <td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td> -->
+<!-- td></td><td style="line-height: 130%; word-wrap: break-word;">The path where to save the kubeconfig file.</td-->
 <td></td><td style="line-height: 130%; word-wrap: break-word;">保存 kubeconfig 文件的路径。</td>
 </tr>
 
 </tbody>
 </table>
 
-
-
-<!-- ### Options inherited from parent commands -->
+<!--
+### Options inherited from parent commands
+-->
 ### 继承于父命令的选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -107,5 +114,3 @@ kubeadm alpha certs generate-csr [flags]
 </tbody>
 </table>
 
-
-

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_renew.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew.md

@@ -2,23 +2,20 @@
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!--
 This command is not meant to be run on its own. See list of available subcommands.
 -->
-
 此命令并非设计用来单独运行。请参阅可用子命令列表。
 
 ```
-kubeadm alpha certs renew [flags]
+kubeadm certs renew [flags]
 ```
 
 <!--
 ### Options
 -->
-
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_renew_admin.conf.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_admin.conf.md

@@ -2,36 +2,31 @@
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!--
 Renew the certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself.
 -->
-
 续订 kubeconfig 文件中嵌入的证书，供管理员 和 kubeadm 自身使用。
 
 <!--
 Renewals run unconditionally, regardless of certificate expiration date; extra attributes such as SANs will be based on the existing file/certificates, there is no need to resupply them.
 -->
-
 无论证书的到期日期如何，续订都是无条件进行的；SAN 等额外属性将基于现有文件/证书，因此无需重新提供它们。
 
 <!--
 Renewal by default tries to use the certificate authority in the local PKI managed by kubeadm; as alternative it is possible to use K8s certificate API for certificate renewal, or as a last option, to generate a CSR request.
 -->
-
 默认情况下，续订会尝试使用由 kubeadm 管理的本地 PKI 中的证书机构；作为替代方案，
-也可以使用 K8s certificate API 进行证书续订，或者（作为最后一种选择）生成 CSR 请求。
+也可以使用 K8s 证书 API 进行证书续订，或者（作为最后一种选择）生成 CSR 请求。
 
 <!--
 After renewal, in order to make changes effective, is is required to restart control-plane components and eventually re-distribute the renewed certificate in case the file is used elsewhere.
 -->
-
 续订后，为了使更改生效，需要重新启动控制平面组件，并最终重新分发更新的证书，以防证书文件在其他地方使用。
 
 ```
-kubeadm alpha certs renew admin.conf [flags]
+kubeadm certs renew admin.conf [flags]
 ```
 
 <!--
@@ -100,7 +95,7 @@ Create CSRs instead of generating certificates
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;">
 <!-- help for admin.conf -->
-admin.conf 操作的帮助命令
+admin.conf 子操作的帮助命令
 </td>
 </tr>
 
@@ -110,7 +105,8 @@ admin.conf 操作的帮助命令
 <tr>
 <td></td><td style="line-height: 130%; word-wrap: break-word;">
 <!-- The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.  -->
-与集群通信时使用的 kubeconfig 文件。如果未设置该参数，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
+与集群通信时使用的 kubeconfig 文件。
+如果未设置该参数，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
 </td>
 </tr>
 
@@ -132,7 +128,6 @@ Use the Kubernetes certificate API to renew certificates
 <!--
 ### Options inherited from parent commands
 -->
-
 ### 从父命令继承的选项
 
    <table style="width: 100%; table-layout: fixed;">

content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_renew_all.md renamed to content/zh/docs/reference/setup-tools/kubeadm/generated/kubeadm_certs_renew_all.md

@@ -2,23 +2,20 @@
 <!--
 ### Synopsis
 -->
-
 ### 概要
 
 <!--
 Renew all known certificates necessary to run the control plane. Renewals are run unconditionally, regardless of expiration date. Renewals can also be run individually for more control.
 -->
-
 续订运行控制平面所需的所有已知证书。续订是无条件进行的，与到期日期无关。续订也可以单独运行以进行更多控制。
 
 ```
-kubeadm alpha certs renew all [flags]
+kubeadm certs renew all [flags]
 ```
 
 <!--
 ### Options
 -->
-
 ### 选项
 
    <table style="width: 100%; table-layout: fixed;">
@@ -106,7 +103,8 @@ all 操作的帮助命令
 <!--
 The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.
 -->
-与集群通信时使用的 kubeconfig 文件。如果未设置该参数，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
+与集群通信时使用的 kubeconfig 文件。
+如果未设置该参数，则可以在一组标准位置中搜索现有的 kubeconfig 文件。
 </td>
 </tr>
 
@@ -128,7 +126,6 @@ Use the Kubernetes certificate API to renew certificates
 <!--
 ### Options inherited from parent commands
 -->
-
 ### 从父命令继承的选项
 
    <table style="width: 100%; table-layout: fixed;">