[zh] sync certificates.md user-namespaces.md update-api-object-kubect…

…l-patch.md

Signed-off-by: xin.li <xin.li@daocloud.io>

content/zh-cn/docs/tasks/administer-cluster/certificates.md

@@ -200,7 +200,7 @@ manually through `easyrsa`, `openssl` or `cfssl`.
    ```shell
    openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
        -CAcreateserial -out server.crt -days 10000 \
-       -extensions v3_ext -extfile csr.conf
+       -extensions v3_ext -extfile csr.conf -sha256
    ```
 
 <!--

content/zh-cn/docs/tasks/configure-pod-container/user-namespaces.md

@@ -164,13 +164,13 @@ output from running the command in the pod to the output of running in the host:
 ```none
 readlink /proc/$pid/ns/user
 user:[4026534732]
-
+```
 
 replacing `$pid` with the kubelet PID.
 -->
 ```none
 readlink /proc/$pid/ns/user
 user:[4026534732]
-
+```
 
 使用 kubelet 的进程号代替 `$pid`

content/zh-cn/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch.md

@@ -227,7 +227,7 @@ patch 策略：
     "x-kubernetes-patch-strategy": "merge"
 }
 ```
-<!-- for editors: intionally use yaml instead of json here, to prevent syntax highlight error. -->
+<!-- for editors: intentionally use yaml instead of json here, to prevent syntax highlight error. -->
 
 <!--
 And you can see the patch strategy in the
@@ -574,7 +574,7 @@ You can also see the `retainKeys` strategy in the [OpenApi spec](https://raw.git
     ....
 }
 ```
-<!-- for editors: intionally use yaml instead of json here, to prevent syntax highlight error. -->
+<!-- for editors: intentionally use yaml instead of json here, to prevent syntax highlight error. -->
 
 <!--
 And you can see the `retainKeys` strategy in the