Merge pull request #52134 from asa3311/sync-zh-193

[zh] sync service user-namespaces

Author: k8s-ci-robot

content/zh-cn/docs/concepts/services-networking/service.md

@@ -1732,9 +1732,10 @@ Kubernetes {{< skew currentVersion >}} 支持以下字段值：
 {{< feature-state feature_gate_name="PreferSameTrafficDistribution" >}}
 
 <!--
-Two additional values are available when the `PreferSameTrafficDistribution`
-[feature gate](/docs/reference/command-line-tools-reference/feature-gates/) is
-enabled:
+In Kubernetes {{< skew currentVersion >}}, two additional values are
+available (unless the `PreferSameTrafficDistribution` [feature
+gate](/docs/reference/command-line-tools-reference/feature-gates/) is
+disabled):
 
 `PreferSameZone`
 : This is an alias for `PreferClose` that is clearer about the intended semantics.
@@ -1743,8 +1744,9 @@ enabled:
 : Indicates a preference for routing traffic to endpoints that are on the same
   node as the client.
 -->
-当 `PreferSameTrafficDistribution`
-[特性门控](/zh-cn/docs/reference/command-line-tools-reference/feature-gates/)被启用时，还可以使用两个附加的取值：
+在 Kubernetes {{< skew currentVersion >}} 中，
+另外提供了两个可选值（除非禁用了 `PreferSameTrafficDistribution` 
+[特性门控](/zh-cn/docs/reference/command-line-tools-reference/feature-gates/) ）：
 
 `PreferSameZone`  
 : 这是 `PreferClose` 的别名，但它更清晰地表达了预期的语义。

content/zh-cn/docs/concepts/workloads/pods/user-namespaces.md

@@ -508,6 +508,32 @@ allowed to set any of:
 * `hostIPC: true`
 * `hostPID: true`
 
+<!--
+No container can use `volumeDevices` (raw block volumes, like /dev/sda) either.
+This includes all the container arrays in the pod spec:
+ * `containers`
+ * `initContainers`
+ * `ephemeralContainers`
+-->
+任何容器都不能使用 `volumeDevices`（原始块设备卷，例如 /dev/sda）。
+这包括 Pod 规约中的所有容器数组：
+ * `containers`
+ * `initContainers`
+ * `ephemeralContainers`
+
+<!--
+## Metrics and observability
+
+The kubelet exports two prometheus metrics specific to user-namespaces:
+* `started_user_namespaced_pods_total`: a counter that tracks the number of user namespaced pods that are attempted to be created.
+* `started_user_namespaced_pods_errors_total`: a counter that tracks the number of errors creating user namespaced pods.
+-->
+## 指标与可观测性
+
+kubelet 会导出两项与用户命名空间相关的 Prometheus 指标：
+ * `started_user_namespaced_pods_total`：这个计数器跟踪尝试创建的、作用域为用户命名空间的 Pod 数量。
+ * `started_user_namespaced_pods_errors_total`：这个计数器跟踪创建作用域为用户命名空间的 Pod 时发生的错误次数。
+
 ## {{% heading "whatsnext" %}}
 
 <!--