[zh] update zh/docs/concepts page, fix 23920

Author: zhiguo-lu

content/zh/docs/concepts/configuration/_index.md

@@ -1,4 +1,5 @@
 ---
 title: "配置"
-weight: 70
+weight: 80
+description: Kubernetes 为配置 Pods 提供的资源。
 ---

content/zh/docs/concepts/containers/_index.md

@@ -1,4 +1,63 @@
 ---
 title: "容器"
-weight: 50
+weight: 40
+description: 打包应用及其运行依赖环境的技术。
+content_type: concept
+no_list: true
 ---
+
+<!-- overview -->
+<!--
+Each container that you run is repeatable; the standardization from having
+dependencies included means that you get the same behavior wherever you
+run it.
+
+Containers decouple applications from underlying host infrastructure.
+This makes deployment easier in different cloud or OS environments.
+-->
+
+每个运行的容器都是可重复的；
+包含依赖环境在内的标准，意味着无论您在哪里运行它，您都会得到相同的行为。
+
+容器将应用程序从底层的主机设施中解耦。
+这使得在不同的云或 OS 环境中部署更加容易。
+
+
+
+
+<!-- body -->
+<!--
+## Container images
+A [container image](/docs/concepts/containers/images/) is a ready-to-run
+software package, containing everything needed to run an application:
+the code and any runtime it requires, application and system libraries,
+and default values for any essential settings.
+
+By design, a container is immutable: you cannot change the code of a
+container that is already running. If you have a containerized application
+and want to make changes, you need to build a new image that includes
+the change, then recreate the container to start from the updated image.
+-->
+
+## 容器镜像 {#container-images}
+[容器镜像](/zh/docs/concepts/containers/images/)是一个随时可以运行的软件包，
+包含运行应用程序所需的一切：代码和它需要的所有运行时、应用程序和系统库，以及一些基本设置的默认值。
+
+根据设计，容器是不可变的：你不能更改已经运行的容器的代码。
+如果有一个容器化的应用程序需要修改，则需要构建包含更改的新镜像，然后再基于新构建的镜像重新运行容器。
+
+<!-- ## Container runtimes -->
+## 容器运行时  {#container-runtimes}
+
+{{< glossary_definition term_id="container-runtime" length="all" >}}
+
+## {{% heading "whatsnext" %}}
+<!--
+* Read about [container images](/docs/concepts/containers/images/)
+* Read about [Pods](/docs/concepts/workloads/pods/)
+-->
+
+* 进一步阅读[容器镜像](/zh/docs/concepts/containers/images/)
+* 进一步阅读 [Pods](/zh/docs/concepts/workloads/pods/)
+
+

content/zh/docs/concepts/overview/_index.md

@@ -1,4 +1,5 @@
 ---
 title: 概述
 weight: 20
+description: 获得 Kubernetes 及其构件的高层次概要。
 ---

content/zh/docs/concepts/policy/_index.md

@@ -1,4 +1,5 @@
 ---
 title: "策略"
-weight: 160
+weight: 90
+description: 可配置的、可应用到一组资源的策略。
 ---

content/zh/docs/concepts/scheduling-eviction/_index.md

@@ -1,4 +1,5 @@
 ---
-title: "调度和驱逐(Scheduling and Eviction)"
+title: 调度和驱逐 (Scheduling and Eviction)
 weight: 90
+description: 在Kubernetes中，调度 (Scheduling) 指的是确保 Pods 匹配到合适的节点，以便 kubelet 能够运行它们。驱逐 (Eviction) 是在资源匮乏的节点上，主动让一个或多个 Pods 失效的过程。
 ---

content/zh/docs/concepts/security/_index.md

@@ -1,4 +1,5 @@
 ---
 title: "安全"
 weight: 81
+description: 确保云原生工作负载安全的一组概念。
 ---

content/zh/docs/concepts/services-networking/_index.md

@@ -1,4 +1,19 @@
 ---
 title: "服务、负载均衡和联网"
-weight: 80
+weight: 60
+description: Kubernetes 网络背后的概念和资源。
 ---
+
+<!--
+Kubernetes networking addresses four concerns:
+- Containers within a Pod use networking to communicate via loopback.
+- Cluster networking provides communication between different Pods.
+- The Service resource lets you expose an application running in Pods to be reachable from outside your cluster.
+- You can also use Services to publish services only for consumption inside your cluster.
+-->
+
+Kubernetes 网络解决四方面的问题：
+- 一个 Pod 中的容器之间通过本地回路（loopback）通信。
+- 集群网络在不同 pod 之间提供通信。
+- Service 资源允许你对外暴露 Pods 中运行的应用程序，以支持来自于集群外部的访问。
+- 可以使用 Services 来发布仅供集群内部使用的服务。

content/zh/docs/concepts/storage/_index.md

@@ -1,4 +1,5 @@
 ---
 title: "存储"
 weight: 70
+description: 为集群中的 Pods 提供长期和临时存储的方法。
 ---

content/zh/docs/concepts/workloads/_index.md

@@ -1,4 +1,5 @@
 ---
 title: "工作负载"
 weight: 50
+description: 理解 Pods，Kubernetes 中可部署的最小计算对象，以及辅助它运行它们的高层抽象对象。
 ---