diff --git a/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-token.md b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-token.md
new file mode 100644
index 0000000000..24d3dac6b6
--- /dev/null
+++ b/content/zh/docs/reference/setup-tools/kubeadm/kubeadm-token.md
@@ -0,0 +1,61 @@
+---
+reviewers:
+- mikedanese
+- luxas
+- jbeda
+title: kubeadm 令牌
+content_template: templates/concept
+weight: 70
+---
+
+<!--
+---
+reviewers:
+- mikedanese
+- luxas
+- jbeda
+title: kubeadm token
+content_template: templates/concept
+weight: 70
+---
+-->
+
+{{% capture overview %}}
+<!--
+Bootstrap tokens are used for establishing bidirectional trust between a node joining
+the cluster and a master node, as described in [authenticating with bootstrap tokens](/docs/reference/access-authn-authz/bootstrap-tokens/).
+-->
+
+如[使用引导令牌进行身份验证](/docs/reference/access-authn-authz/bootstrap-tokens/)所描述的，引导令牌用于在即将加入集群的节点和主节点间建立双向认证。
+
+<!--
+`kubeadm init` creates an initial token with a 24-hour TTL. The following commands allow you to manage
+such a token and also to create and manage new ones.
+-->
+
+`kubeadm init` 创建了一个有效期为 24 小时的令牌，下面的命令允许您管理令牌，也可以创建和管理新的令牌。
+
+{{% /capture %}}
+
+{{% capture body %}}
+## kubeadm token create {#cmd-token-create}
+{{< include "generated/kubeadm_token_create.md" >}}
+
+## kubeadm token delete {#cmd-token-delete}
+{{< include "generated/kubeadm_token_delete.md" >}}
+
+## kubeadm token generate {#cmd-token-generate}
+{{< include "generated/kubeadm_token_generate.md" >}}
+
+## kubeadm token list {#cmd-token-list}
+{{< include "generated/kubeadm_token_list.md" >}}
+{{% /capture %}}
+
+{{% capture whatsnext %}}
+* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) 引导 Kubernetes 工作节点并将其加入群集
+{{% /capture %}}
+<!--
+* [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) to bootstrap a Kubernetes worker node and join it to the cluster
+-->
+
+