update the markdown file in the glossary directory.

content/zh/docs/reference/glossary/security-context.md

@@ -1,8 +1,23 @@
+<!--
+---
+title: Security Context
+id: security-context
+date: 2018-04-12
+full_link: /docs/tasks/configure-pod-container/security-context/
+short_description: >
+  The securityContext field defines privilege and access control settings for a Pod or container.
+
+aka: 
+tags:
+- security
+---
+-->
+
 ---
 title: 安全上下文（Security Context）
 id: security-context
 date: 2018-04-12
-full_link: /docs/tasks/configure-pod-container/security-context/
+full_link: /zh/docs/tasks/configure-pod-container/security-context/
 short_description: >
   securityContext 字段定义 Pod 或容器的特权和访问控制设置，包括运行时 UID 和 GID。
 
@@ -12,32 +27,25 @@ tags:
 ---
 
 <!--
----
-title: Security Context
-id: security-context
-date: 2018-04-12
-full_link: /docs/tasks/configure-pod-container/security-context/
-short_description: >
-  The securityContext field defines privilege and access control settings for a Pod or Container, including the runtime UID and GID.
-
-aka: 
-tags:
-- security
----
+ The `securityContext` field defines privilege and access control settings for
+a {{< glossary_tooltip text="Pod" term_id="pod" >}} or
+{{< glossary_tooltip text="container" term_id="container" >}}.
 -->
 
+securityContext 字段定义 {{< glossary_tooltip text="Pod" term_id="pod" >}} 或 {{< glossary_tooltip text="container（容器）" term_id="container" >}} 的特权和访问控制设置。
+
+<!--more-->
+
 <!--
- The securityContext field defines privilege and access control settings for a Pod or Container, including the runtime UID and GID.
+In a `securityContext`, you can define: the user that processes run as,
+the group that processes run as, and privilege settings.
+You can also configure security policies (for example: SELinux, AppArmor or seccomp).
 -->
-securityContext 字段定义 Pod 或容器的特权和访问控制设置，包括运行时 UID 和 GID。
 
-<!--more--> 
+在一个 securityContext 字段中，可以设置进程所属用户和用户组、权限相关设置。你也可以设置安全策略（例如：SELinux、AppArmor、seccomp）	
 
 <!--
-The securityContext field in a {{< glossary_tooltip term_id="pod" >}} (applying to all containers) or container is used to set the user (runAsUser) and group (fsGroup), capabilities, privilege settings, and security policies (SELinux/AppArmor/Seccomp) that container processes use.
+The `PodSpec.securityContext` setting applies to all containers in a Pod.
 -->
-{{< glossary_tooltip term_id="pod" >}} 或者容器中的 securityContext 字段（应用于所有容器）用于设置容器进程使用的用户（runAsUser）和组 （fsGroup）、权能字、特权设置和安全策略（SELinux/AppArmor/Seccomp）。
-
-
-
 
+‘PodSpec.securityContext’字段配置会应用到一个Pod中的所有的container。