[zh-cn] sync migrate-dockershim-dockerd enforce-standards-admission-controller

Signed-off-by: xin.li <xin.li@daocloud.io>

content/zh-cn/docs/tasks/administer-cluster/migrating-from-dockershim/migrate-dockershim-dockerd.md

@@ -146,9 +146,12 @@ instructions for that tool.
 1.  Open `/var/lib/kubelet/kubeadm-flags.env` on each affected node.
 1.  Modify the `--container-runtime-endpoint` flag to
     `unix:///var/run/cri-dockerd.sock`.
+1.  Modify the `--container-runtime` flag to `remote`
+    (unavailable in Kubernetes v1.27 and later).
 -->
 1. 在每个被影响的节点上，打开 `/var/lib/kubelet/kubeadm-flags.env` 文件；
 1. 将 `--container-runtime-endpoint` 标志，将其设置为 `unix:///var/run/cri-dockerd.sock`。
+1. 将 `--container-runtime` 标志修改为 `remote`（在 Kubernetes v1.27 及更高版本中不可用）。
 
 <!--
 The kubeadm tool stores the node's socket as an annotation on the `Node` object

content/zh-cn/docs/tasks/configure-pod-container/enforce-standards-admission-controller.md

@@ -62,7 +62,7 @@ For v1.22, use [v1alpha1](https://v1-22.docs.kubernetes.io/docs/tasks/configure-
 {{< /note >}}
 
 ```yaml
-apiVersion: apiserver.config.k8s.io/v1 # 查阅兼容性说明
+apiVersion: apiserver.config.k8s.io/v1
 kind: AdmissionConfiguration
 plugins:
 - name: PodSecurity