[zh-cn] resync access/clusterrole-*.yaml

content/zh-cn/examples/access/certificate-signing-request/clusterrole-approve.yaml

@@ -22,7 +22,7 @@ rules:
   resources:
   - signers
   resourceNames:
-  - example.com/my-signer-name # example.com/* can be used to authorize for all signers in the 'example.com' domain
+  - example.com/my-signer-name # example.com/* 可用于为 “example.com” 域中的所有签名者授权
   verbs:
   - approve
 

content/zh-cn/examples/access/certificate-signing-request/clusterrole-sign.yaml

@@ -22,6 +22,6 @@ rules:
   resources:
   - signers
   resourceNames:
-  - example.com/my-signer-name # example.com/* can be used to authorize for all signers in the 'example.com' domain
+  - example.com/my-signer-name # example.com/* 可用于为 “example.com” 域中的所有签名者授权
   verbs:
   - sign

content/zh-cn/examples/access/endpoints-aggregated.yaml

@@ -11,7 +11,7 @@ metadata:
       intended to prevent/isolate access to those backends.
   labels:
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
-  name: custom:aggregate-to-edit:endpoints # you can change this if you wish
+  name: custom:aggregate-to-edit:endpoints # 你可以随意愿更改这个 name
 rules:
   - apiGroups: [""]
     resources: ["endpoints"]