diff --git a/content/zh-cn/examples/pods/inject/envars.yaml b/content/zh-cn/examples/pods/inject/envars.yaml index ebf5214376..7bfca7b64b 100644 --- a/content/zh-cn/examples/pods/inject/envars.yaml +++ b/content/zh-cn/examples/pods/inject/envars.yaml @@ -7,7 +7,7 @@ metadata: spec: containers: - name: envar-demo-container - image: gcr.io/google-samples/node-hello:1.0 + image: gcr.io/google-samples/hello-app:2.0 env: - name: DEMO_GREETING value: "Hello from the environment" diff --git a/content/zh-cn/examples/pods/pod-with-scheduling-gates.yaml b/content/zh-cn/examples/pods/pod-with-scheduling-gates.yaml index b0b012fb72..de761d9694 100644 --- a/content/zh-cn/examples/pods/pod-with-scheduling-gates.yaml +++ b/content/zh-cn/examples/pods/pod-with-scheduling-gates.yaml @@ -4,8 +4,8 @@ metadata: name: test-pod spec: schedulingGates: - - name: foo - - name: bar + - name: example.com/foo + - name: example.com/bar containers: - name: pause image: registry.k8s.io/pause:3.6 diff --git a/content/zh-cn/examples/pods/security/seccomp/ga/audit-pod.yaml b/content/zh-cn/examples/pods/security/seccomp/ga/audit-pod.yaml index 409d4b923c..34aacd7d95 100644 --- a/content/zh-cn/examples/pods/security/seccomp/ga/audit-pod.yaml +++ b/content/zh-cn/examples/pods/security/seccomp/ga/audit-pod.yaml @@ -11,7 +11,7 @@ spec: localhostProfile: profiles/audit.json containers: - name: test-container - image: hashicorp/http-echo:0.2.3 + image: hashicorp/http-echo:1.0 args: - "-text=just made some syscalls!" securityContext: diff --git a/content/zh-cn/examples/pods/security/seccomp/ga/default-pod.yaml b/content/zh-cn/examples/pods/security/seccomp/ga/default-pod.yaml index b884ec5924..153031fc9d 100644 --- a/content/zh-cn/examples/pods/security/seccomp/ga/default-pod.yaml +++ b/content/zh-cn/examples/pods/security/seccomp/ga/default-pod.yaml @@ -10,7 +10,7 @@ spec: type: RuntimeDefault containers: - name: test-container - image: hashicorp/http-echo:0.2.3 + image: hashicorp/http-echo:1.0 args: - "-text=just made some more syscalls!" securityContext: diff --git a/content/zh-cn/examples/pods/security/seccomp/ga/fine-pod.yaml b/content/zh-cn/examples/pods/security/seccomp/ga/fine-pod.yaml index 692b828151..dd7622fe15 100644 --- a/content/zh-cn/examples/pods/security/seccomp/ga/fine-pod.yaml +++ b/content/zh-cn/examples/pods/security/seccomp/ga/fine-pod.yaml @@ -11,7 +11,7 @@ spec: localhostProfile: profiles/fine-grained.json containers: - name: test-container - image: hashicorp/http-echo:0.2.3 + image: hashicorp/http-echo:1.0 args: - "-text=just made some syscalls!" securityContext: diff --git a/content/zh-cn/examples/pods/security/seccomp/ga/violation-pod.yaml b/content/zh-cn/examples/pods/security/seccomp/ga/violation-pod.yaml index 70deadf4b2..c4844df37c 100644 --- a/content/zh-cn/examples/pods/security/seccomp/ga/violation-pod.yaml +++ b/content/zh-cn/examples/pods/security/seccomp/ga/violation-pod.yaml @@ -11,7 +11,7 @@ spec: localhostProfile: profiles/violation.json containers: - name: test-container - image: hashicorp/http-echo:0.2.3 + image: hashicorp/http-echo:1.0 args: - "-text=just made some syscalls!" securityContext: diff --git a/content/zh-cn/examples/pods/security/security-context-2.yaml b/content/zh-cn/examples/pods/security/security-context-2.yaml index 0e3185341e..004a94c493 100644 --- a/content/zh-cn/examples/pods/security/security-context-2.yaml +++ b/content/zh-cn/examples/pods/security/security-context-2.yaml @@ -7,7 +7,7 @@ spec: runAsUser: 1000 containers: - name: sec-ctx-demo-2 - image: gcr.io/google-samples/node-hello:1.0 + image: gcr.io/google-samples/hello-app:2.0 securityContext: runAsUser: 2000 allowPrivilegeEscalation: false diff --git a/content/zh-cn/examples/pods/security/security-context-3.yaml b/content/zh-cn/examples/pods/security/security-context-3.yaml index d68b2a783e..8fa7ac2cf5 100644 --- a/content/zh-cn/examples/pods/security/security-context-3.yaml +++ b/content/zh-cn/examples/pods/security/security-context-3.yaml @@ -5,4 +5,4 @@ metadata: spec: containers: - name: sec-ctx-3 - image: gcr.io/google-samples/node-hello:1.0 + image: gcr.io/google-samples/hello-app:2.0 diff --git a/content/zh-cn/examples/pods/security/security-context-4.yaml b/content/zh-cn/examples/pods/security/security-context-4.yaml index d725308fec..516360c820 100644 --- a/content/zh-cn/examples/pods/security/security-context-4.yaml +++ b/content/zh-cn/examples/pods/security/security-context-4.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: sec-ctx-4 - image: gcr.io/google-samples/node-hello:1.0 + image: gcr.io/google-samples/hello-app:2.0 securityContext: capabilities: add: ["NET_ADMIN", "SYS_TIME"] diff --git a/content/zh-cn/examples/pods/security/security-context.yaml b/content/zh-cn/examples/pods/security/security-context.yaml index 7903c39c64..aeeaebb92d 100644 --- a/content/zh-cn/examples/pods/security/security-context.yaml +++ b/content/zh-cn/examples/pods/security/security-context.yaml @@ -7,6 +7,7 @@ spec: runAsUser: 1000 runAsGroup: 3000 fsGroup: 2000 + supplementalGroups: [4000] volumes: - name: sec-ctx-vol emptyDir: {} diff --git a/content/zh-cn/examples/pods/share-process-namespace.yaml b/content/zh-cn/examples/pods/share-process-namespace.yaml index bd48bf0ff6..cae161bd3b 100644 --- a/content/zh-cn/examples/pods/share-process-namespace.yaml +++ b/content/zh-cn/examples/pods/share-process-namespace.yaml @@ -9,6 +9,7 @@ spec: image: nginx - name: shell image: busybox:1.28 + command: ["sleep", "3600"] securityContext: capabilities: add: diff --git a/content/zh-cn/examples/pods/storage/projected-clustertrustbundle.yaml b/content/zh-cn/examples/pods/storage/projected-clustertrustbundle.yaml index 452384a445..bd660c189e 100644 --- a/content/zh-cn/examples/pods/storage/projected-clustertrustbundle.yaml +++ b/content/zh-cn/examples/pods/storage/projected-clustertrustbundle.yaml @@ -13,7 +13,7 @@ spec: readOnly: true serviceAccountName: default volumes: - - name: root-certificates-vol + - name: token-vol projected: sources: - clusterTrustBundle: diff --git a/content/zh-cn/examples/pods/storage/projected-secret-downwardapi-configmap.yaml b/content/zh-cn/examples/pods/storage/projected-secret-downwardapi-configmap.yaml index 453dc08c0c..b4686defca 100644 --- a/content/zh-cn/examples/pods/storage/projected-secret-downwardapi-configmap.yaml +++ b/content/zh-cn/examples/pods/storage/projected-secret-downwardapi-configmap.yaml @@ -6,6 +6,7 @@ spec: containers: - name: container-test image: busybox:1.28 + command: ["sleep", "3600"] volumeMounts: - name: all-in-one mountPath: "/projected-volume" diff --git a/content/zh-cn/examples/pods/storage/projected-secrets-nondefault-permission-mode.yaml b/content/zh-cn/examples/pods/storage/projected-secrets-nondefault-permission-mode.yaml index b921fd93c5..caa0ec02a2 100644 --- a/content/zh-cn/examples/pods/storage/projected-secrets-nondefault-permission-mode.yaml +++ b/content/zh-cn/examples/pods/storage/projected-secrets-nondefault-permission-mode.yaml @@ -6,6 +6,7 @@ spec: containers: - name: container-test image: busybox:1.28 + command: ["sleep", "3600"] volumeMounts: - name: all-in-one mountPath: "/projected-volume" diff --git a/content/zh-cn/examples/pods/storage/projected-service-account-token.yaml b/content/zh-cn/examples/pods/storage/projected-service-account-token.yaml index cc307659a7..f1025fda23 100644 --- a/content/zh-cn/examples/pods/storage/projected-service-account-token.yaml +++ b/content/zh-cn/examples/pods/storage/projected-service-account-token.yaml @@ -6,6 +6,7 @@ spec: containers: - name: container-test image: busybox:1.28 + command: ["sleep", "3600"] volumeMounts: - name: token-vol mountPath: "/service-account"