[zh] docs: sync and update the ref

Signed-off-by: zhangguanzhang <[email protected]>

Author: zhangguanzhang

content/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig.md

@@ -30,6 +30,17 @@ It does not mean that there is a file named `kubeconfig`.
 用于配置集群访问的文件称为 *kubeconfig 文件*。这是引用配置文件的通用方法。这并不意味着有一个名为 `kubeconfig` 的文件
 {{< /note >}}
 
+<!--
+{{< warning >}}
+Only use kubeconfig files from trusted sources. Using a specially-crafted kubeconfig file could result in malicious code execution or file exposure. 
+If you must use an untrusted kubeconfig file, inspect it carefully first, much as you would a shell script.
+{{< /warning>}}
+-->
+{{< warning >}}
+只使用来源可靠的 kubeconfig 文件。使用特制的 kubeconfig 文件可能会导致恶意代码执行或文件暴露。
+如果必须使用不受信任的 kubeconfig 文件，请首先像检查 shell 脚本一样仔细检查它。
+{{< /warning>}}
+
 <!--
 By default, `kubectl` looks for a file named `config` in the `$HOME/.kube` directory.
 You can specify other kubeconfig files by setting the `KUBECONFIG` environment

content/zh/docs/concepts/configuration/overview.md

@@ -25,7 +25,7 @@ This is a living document. If you think of something that is not on this list bu
 <!--
 ## General Configuration Tips
 -->
-## 一般配置提示
+## 一般配置提示  {#general-configuration-tips}
 
 <!--
 - When defining configurations, specify the latest stable API version.
@@ -71,7 +71,7 @@ This is a living document. If you think of something that is not on this list bu
 <!--
 ## "Naked" Pods vs ReplicaSets, Deployments, and Jobs
 -->
-## “Naked”Pods 与 ReplicaSet，Deployment 和 Jobs
+## “Naked” Pods 与 ReplicaSet，Deployment 和 Jobs
 
 <!--
 - Don't use naked Pods (that is, Pods not bound to a [ReplicaSet](/docs/concepts/workloads/controllers/replicaset/) or [Deployment](/docs/concepts/workloads/controllers/deployment/)) if you can avoid it. Naked Pods will not be rescheduled in the event of a node failure.

content/zh/docs/tasks/administer-cluster/encrypt-data.md

@@ -253,11 +253,11 @@ program to retrieve the contents of your secret.
    ```
 
    <!--
-   should match `mykey: mydata`, mydata is encoded, check [decoding a secret](/docs/concepts/configuration/secret#decoding-a-secret) to
+   should match `mykey: mydata`, mydata is encoded, check [decoding a secret](/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret) to
    completely decode the secret.
    -->
    其输出应该是 `mykey: bXlkYXRh`，`mydata` 数据是被加密过的，请参阅
-   [解密 Secret](/zh/docs/concepts/configuration/secret#decoding-a-secret)
+   [解密 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret)
    了解如何完全解码 Secret 内容。
 
 <!--