sync zh/ en/ (#19918)

content/zh/examples/admin/namespace-dev.json

@@ -1,6 +1,6 @@
 {
-  "kind": "Namespace",
   "apiVersion": "v1",
+  "kind": "Namespace",
   "metadata": {
     "name": "development",
     "labels": {

content/zh/examples/admin/namespace-prod.json

@@ -1,6 +1,6 @@
 {
-  "kind": "Namespace",
   "apiVersion": "v1",
+  "kind": "Namespace",
   "metadata": {
     "name": "production",
     "labels": {

content/zh/examples/admin/resource/quota-mem-cpu-pod-2.yaml

@@ -13,4 +13,3 @@ spec:
       requests:
         memory: "700Mi"
         cpu: "400m"
-

content/zh/examples/admin/resource/quota-mem-cpu-pod.yaml

@@ -13,4 +13,3 @@ spec:
       requests:
         memory: "600Mi"
         cpu: "400m"
-

content/zh/examples/admin/snowflake-deployment.yaml

@@ -0,0 +1,20 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: snowflake
+  name: snowflake
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: snowflake
+  template:
+    metadata:
+      labels:
+        app: snowflake
+    spec:
+      containers:
+      - image: k8s.gcr.io/serve_hostname
+        imagePullPolicy: Always
+        name: snowflake

content/zh/examples/application/job/rabbitmq/Dockerfile

@@ -1,5 +1,5 @@
 # Specify BROKER_URL and QUEUE when running
-FROM ubuntu:14.04
+FROM ubuntu:18.04
 
 RUN apt-get update && \
     apt-get install -y curl ca-certificates amqp-tools python \

content/zh/examples/application/job/rabbitmq/worker.py

@@ -3,5 +3,5 @@
 # Just prints standard out and sleeps for 10 seconds.
 import sys
 import time
-print("Processing " + sys.stdin.lines())
+print("Processing " + sys.stdin.readlines()[0])
 time.sleep(10)

content/zh/examples/application/job/redis/rediswq.py

@@ -111,7 +111,7 @@ class RedisWQ(object):
         # If we crash here, then the GC code will try to move the value, but it will
         # not be here, which is fine.  So this does not need to be a transaction.
         itemkey = self._itemkey(value)
-        self._db.delete(self._lease_key_prefix + itemkey, self._session)
+        self._db.delete(self._lease_key_prefix + itemkey)
 
 # TODO: add functions to clean up all keys associated with "name" when
 # processing is complete.

content/zh/examples/application/job/redis/worker.py

@@ -14,7 +14,7 @@ print("Initial queue state: empty=" + str(q.empty()))
 while not q.empty():
   item = q.lease(lease_secs=10, block=True, timeout=2) 
   if item is not None:
-    itemstr = item.decode("utf=8")
+    itemstr = item.decode("utf-8")
     print("Working on " + itemstr)
     time.sleep(10) # Put your actual work here instead of sleep.
     q.complete(item)

content/zh/examples/application/php-apache.yaml

@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: php-apache
+spec:
+  selector:
+    matchLabels:
+      run: php-apache
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        run: php-apache
+    spec:
+      containers:
+      - name: php-apache
+        image: k8s.gcr.io/hpa-example
+        ports:
+        - containerPort: 80
+        resources:
+          limits:
+            cpu: 500m
+          requests:
+            cpu: 200m
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: php-apache
+  labels:
+    run: php-apache
+spec:
+  ports:
+  - port: 80
+  selector:
+    run: php-apache
+

content/zh/examples/examples_test.go

@@ -34,8 +34,6 @@ import (
 	utilfeature "k8s.io/apiserver/pkg/util/feature"
 	"k8s.io/kubernetes/pkg/api/legacyscheme"
 	"k8s.io/kubernetes/pkg/api/testapi"
-	"k8s.io/kubernetes/pkg/apis/admissionregistration"
-	ar_validation "k8s.io/kubernetes/pkg/apis/admissionregistration/validation"
 	"k8s.io/kubernetes/pkg/apis/apps"
 	apps_validation "k8s.io/kubernetes/pkg/apis/apps/validation"
 	"k8s.io/kubernetes/pkg/apis/autoscaling"
@@ -434,12 +432,6 @@ func TestExampleObjectSchemas(t *testing.T) {
 			"node-problem-detector-configmap": {&apps.DaemonSet{}},
 			"termination":                     {&api.Pod{}},
 		},
-		"federation": {
-			"policy-engine-deployment":    {&apps.Deployment{}},
-			"policy-engine-service":       {&api.Service{}},
-			"replicaset-example-policy":   {&apps.ReplicaSet{}},
-			"scheduling-policy-admission": {&api.ConfigMap{}},
-		},
 		"podpreset": {
 			"allow-db":          {&settings.PodPreset{}},
 			"allow-db-merged":   {&api.Pod{}},
@@ -525,9 +517,9 @@ func TestExampleObjectSchemas(t *testing.T) {
 			"redis":     {&api.Pod{}},
 		},
 		"policy": {
-			"privileged-psp":                                 {&policy.PodSecurityPolicy{}},
+			"privileged-psp": {&policy.PodSecurityPolicy{}},
-			"restricted-psp":                                 {&policy.PodSecurityPolicy{}},
+			"restricted-psp": {&policy.PodSecurityPolicy{}},
-			"example-psp":                                    {&policy.PodSecurityPolicy{}},
+			"example-psp":    {&policy.PodSecurityPolicy{}},
 			"zookeeper-pod-disruption-budget-maxunavailable": {&policy.PodDisruptionBudget{}},
 			"zookeeper-pod-disruption-budget-minunavailable": {&policy.PodDisruptionBudget{}},
 		},
@@ -569,8 +561,6 @@ func TestExampleObjectSchemas(t *testing.T) {
 	capabilities.SetForTests(capabilities.Capabilities{
 		AllowPrivileged: true,
 	})
-	// PodShareProcessNamespace needed for example share-process-namespace.yaml
-	utilfeature.DefaultFeatureGate.Set("PodShareProcessNamespace=true")
 
 	for dir, expected := range cases {
 		tested := 0

content/zh/examples/minikube/Dockerfile

@@ -1,4 +1,4 @@
 FROM node:6.14.2
 EXPOSE 8080
 COPY server.js .
-CMD node server.js
+CMD [ "node", "server.js" ]

content/zh/examples/pods/pod-with-toleration.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: nginx
+  labels:
+    env: test
+spec:
+  containers:
+  - name: nginx
+    image: nginx
+    imagePullPolicy: IfNotPresent
+  tolerations:
+  - key: "example-key"
+    operator: "Exists"
+    effect: "NoSchedule"

content/zh/examples/service/networking/network-policy-allow-all-egress.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-all-egress
+spec:
+  podSelector: {}
+  egress:
+  - {}
+  policyTypes:
+  - Egress

content/zh/examples/service/networking/network-policy-allow-all-ingress.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-all-ingress
+spec:
+  podSelector: {}
+  ingress:
+  - {}
+  policyTypes:
+  - Ingress

content/zh/examples/service/networking/network-policy-default-deny-all.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-all
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress
+  - Egress

content/zh/examples/service/networking/network-policy-default-deny-egress.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-egress
+spec:
+  podSelector: {}
+  policyTypes:
+  - Egress

content/zh/examples/service/networking/network-policy-default-deny-ingress.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-ingress
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress

content/zh/examples/service/networking/nginx-policy.yaml

@@ -0,0 +1,13 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: access-nginx
+spec:
+  podSelector:
+    matchLabels:
+      app: nginx
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          access: "true"