Merge pull request #41368 from asa3311/sync-cheatsheet.md-and-extensible-admission-controllers.md-and-abac.md

[zh-cn] sync cheatsheet.md and extensible-admission-controllers.md and abac.md

Author: k8s-ci-robot

content/zh-cn/docs/reference/access-authn-authz/abac.md

@@ -249,7 +249,7 @@ kubectl 使用 apiserver 的 `/api` 和 `/apis` 端点来发现服务资源类
     ```
 
 <!--
-[Complete file example](https://releases.k8s.io/{{< param "fullversion" >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
+[Complete file example](https://releases.k8s.io/v{{< skew currentPatchVersion >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
 
 ## A quick note on service accounts
 
@@ -260,7 +260,7 @@ system:serviceaccount:<namespace>:<serviceaccountname>
 ```
 
 -->
-[完整文件示例](https://releases.k8s.io/{{< param "fullversion" >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
+[完整文件示例](https://releases.k8s.io/v{{< skew currentPatchVersion >}}/pkg/auth/authorizer/abac/example_policy_file.jsonl)
 
 ## 服务帐户的快速说明   {#a-quick-note-on-service-accounts}
 

content/zh-cn/docs/reference/access-authn-authz/extensible-admission-controllers.md

@@ -211,10 +211,10 @@ webhooks:
 {{< note >}}
 <!-- 
 You must replace the `<CA_BUNDLE>` in the above example by a valid CA bundle
-which is a PEM-encoded CA bundle for validating the webhook's server certificate.
+which is a PEM-encoded (field value is Base64 encoded) CA bundle for validating the webhook's server certificate.
 -->
 你必须在以上示例中将 `<CA_BUNDLE>` 替换为一个有效的 CA 证书包，
-这是一个用 PEM 编码的 CA 证书包，用于校验 Webhook 的服务器证书。
+这是一个用 PEM 编码的（字段值是 Base64 编码） CA 证书包，用于校验 Webhook 的服务器证书。
 {{< /note >}}
 
 <!--

content/zh-cn/docs/reference/kubectl/cheatsheet.md

@@ -25,6 +25,13 @@ card:
 This page contains a list of commonly used `kubectl` commands and flags.
 -->
 
+{{< note >}}
+<!--
+These instructions are for Kubernetes v{{< skew currentVersion >}}. To check the version, use the `kubectl version` command.
+-->
+这些指令适用于 Kubernetes v{{< skew currentVersion >}}。要检查版本，请使用 `kubectl version` 命令。
+{{< /note >}}
+
 本页列举了常用的 `kubectl` 命令和标志。
 
 <!-- body -->
@@ -520,7 +527,9 @@ kubectl get pod mypod -o yaml | sed 's/\(image: myimage\):.*$/\1:v4/' | kubectl
 
 kubectl label pods my-pod new-label=awesome                      # Add a Label
 kubectl label pods my-pod new-label-                             # Remove a label
+kubectl label pods my-pod new-label=new-value --overwrite        # Overwrite an existing value
 kubectl annotate pods my-pod icon-url=http://goo.gl/XXBTWq       # Add an annotation
+kubectl annotate pods my-pod icon-                               # Remove annotation
 kubectl autoscale deployment foo --min=2 --max=10                # Auto scale a deployment "foo"
 ```
 -->
@@ -545,7 +554,9 @@ kubectl get pod mypod -o yaml | sed 's/\(image: myimage\):.*$/\1:v4/' | kubectl
 
 kubectl label pods my-pod new-label=awesome                      # 添加标签
 kubectl label pods my-pod new-label-                             # 移除标签
+kubectl label pods my-pod new-label=new-value --overwrite        # 覆盖现有的值
 kubectl annotate pods my-pod icon-url=http://goo.gl/XXBTWq       # 添加注解
+kubectl annotate pods my-pod icon-                               # 移除标签
 kubectl autoscale deployment foo --min=2 --max=10                # 对 "foo" Deployment 自动伸缩容
 ```
 
@@ -826,9 +837,12 @@ kubectl taint nodes foo dedicated=special-user:NoSchedule
 ### 资源类型   {#resource-types}
 
 <!--
-List all supported resource types along with their shortnames, [API group](/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning), whether they are [namespaced](/docs/concepts/overview/working-with-objects/namespaces), and [Kind](/docs/concepts/overview/working-with-objects/kubernetes-objects):
+List all supported resource types along with their shortnames, [API group](/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning), whether they are [namespaced](/docs/concepts/overview/working-with-objects/namespaces), and [kind](/docs/concepts/overview/working-with-objects/):
 -->
-列出所支持的全部资源类型和它们的简称、[API 组](/zh-cn/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning), 是否是[名字空间作用域](/zh-cn/docs/concepts/overview/working-with-objects/namespaces) 和 [Kind](/zh-cn/docs/concepts/overview/working-with-objects/kubernetes-objects)。
+列出所支持的全部资源类型和它们的简称、
+[API 组](/zh-cn/docs/concepts/overview/kubernetes-api/#api-groups-and-versioning), 
+是否是[名字空间作用域](/zh-cn/docs/concepts/overview/working-with-objects/namespaces) 
+和 [Kind](/zh-cn/docs/concepts/overview/working-with-objects/)。
 
 ```bash
 kubectl api-resources