diff --git a/docs/03-compute-resources.md b/docs/03-compute-resources.md
index b685199..bd92c3c 100644
--- a/docs/03-compute-resources.md
+++ b/docs/03-compute-resources.md
@@ -92,7 +92,7 @@ kubernetes-the-hard-way  us-west1  XX.XXX.XXX.XX  RESERVED
 
 ## Compute Instances
 
-The compute instances in this lab will be provisioned using [Ubuntu Server](https://www.ubuntu.com/server) 18.04, which has good support for the [cri-containerd container runtime](https://github.com/containerd/cri-containerd). Each compute instance will be provisioned with a fixed private IP address to simplify the Kubernetes bootstrapping process.
+The compute instances in this lab will be provisioned using [Ubuntu Server](https://www.ubuntu.com/server) 18.04, which has good support for the [containerd container runtime](https://github.com/containerd/containerd). Each compute instance will be provisioned with a fixed private IP address to simplify the Kubernetes bootstrapping process.
 
 ### Kubernetes Controllers
 
diff --git a/docs/04-certificate-authority.md b/docs/04-certificate-authority.md
index 70d2201..6f25c5c 100644
--- a/docs/04-certificate-authority.md
+++ b/docs/04-certificate-authority.md
@@ -350,6 +350,8 @@ kubernetes.pem
 
 ## The Service Account Key Pair
 
+The Kubernetes Controller Manager leverages a key pair to generate and sign service account tokens as describe in the [managing service accounts](https://kubernetes.io/docs/admin/service-accounts-admin/) documentation.
+
 Create the `service-account` certificate signing request:
 
 ```