sync en zh example yaml (#19778)

content/zh/examples/policy/restricted-psp.yaml

@@ -3,9 +3,9 @@ kind: PodSecurityPolicy
 metadata:
   name: restricted
   annotations:
-    seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
+    seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default'
     apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
-    seccomp.security.alpha.kubernetes.io/defaultProfileName:  'docker/default'
+    seccomp.security.alpha.kubernetes.io/defaultProfileName:  'runtime/default'
     apparmor.security.beta.kubernetes.io/defaultProfileName:  'runtime/default'
 spec:
   privileged: false

content/zh/examples/windows/emptydir-pod.yaml

@@ -1,20 +1,20 @@
- apiVersion: v1
- kind: Pod
- metadata:
-   name: my-empty-dir-pod
- spec:
-   containers:
-   - image: microsoft/windowsservercore:1709
-     name: my-empty-dir-pod
-     volumeMounts:
-     - mountPath: /cache
-       name: cache-volume
-     - mountPath: C:/scratch
-       name: scratch-volume
-   volumes:
-   - name: cache-volume
-     emptyDir: {}
-   - name: scratch-volume
-     emptyDir: {}
-   nodeSelector:
-     beta.kubernetes.io/os: windows
+apiVersion: v1
+kind: Pod
+metadata:
+  name: my-empty-dir-pod
+spec:
+  containers:
+  - image: microsoft/windowsservercore:1709
+    name: my-empty-dir-pod
+    volumeMounts:
+    - mountPath: /cache
+      name: cache-volume
+    - mountPath: C:/scratch
+      name: scratch-volume
+  volumes:
+  - name: cache-volume
+    emptyDir: {}
+  - name: scratch-volume
+    emptyDir: {}
+  nodeSelector:
+    beta.kubernetes.io/os: windows

content/zh/examples/windows/run-as-username-container.yaml

@@ -14,4 +14,4 @@ spec:
         windowsOptions:
             runAsUserName: "ContainerAdministrator"
   nodeSelector:
-    beta.kubernetes.io/os: windows
+    kubernetes.io/os: windows

content/zh/examples/windows/run-as-username-pod.yaml

@@ -11,4 +11,4 @@ spec:
     image: mcr.microsoft.com/windows/servercore:ltsc2019
     command: ["ping", "-t", "localhost"]
   nodeSelector:
-    beta.kubernetes.io/os: windows
+    kubernetes.io/os: windows