Merge pull request #43051 from asa3311/sync-zh-62

[zh] sync cluster-role-binding-v1 cluster-role-v1 role-binding-v1 role-v1

content/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-binding-v1.md

@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ClusterRoleBinding 引用 ClusterRole，但不包含它。"
 title: "ClusterRoleBinding"
-weight: 7
+weight: 6
 auto_generated: false
 ---
 <!-- 
@@ -18,7 +18,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ClusterRoleBinding references a ClusterRole, but not contain it."
 title: "ClusterRoleBinding"
-weight: 7
+weight: 6
 auto_generated: true
 ---
 -->
@@ -56,7 +56,7 @@ ClusterRoleBinding 引用 ClusterRole，但不包含它。
   标准对象的元数据。
 <!-- 
 - **roleRef** (RoleRef), required
-  RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+  RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.
   <a name="RoleRef"></a>
   *RoleRef contains information that points to the role being used*
   - **roleRef.apiGroup** (string), required
@@ -69,7 +69,7 @@ ClusterRoleBinding 引用 ClusterRole，但不包含它。
 - **roleRef** (RoleRef)，必需
 
   RoleRef 只能引用全局命名空间中的 ClusterRole。
-  如果无法解析 RoleRef，则 Authorizer 必定返回一个错误。
+  如果无法解析 RoleRef，则 Authorizer 必定返回一个错误。这个字段是不可变的。
   
   <a name="RoleRef"></a>
   **RoleRef 包含指向正被使用的角色的信息。**

content/zh-cn/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1.md

@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ClusterRole 是一个集群级别的 PolicyRule 逻辑分组，可以被 RoleBinding 或 ClusterRoleBinding 作为一个单元引用。"  
 title: "ClusterRole" 
-weight: 6  
+weight: 5  
 ---
 <!--
 api_metadata:
@@ -16,7 +16,7 @@ api_metadata:
 content_type: "api_reference"
 description: "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding."
 title: "ClusterRole"
-weight: 6
+weight: 5
 auto_generated: true
 -->
 

content/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-binding-v1.md

@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "RoleBinding 引用一个角色，但不包含它。"
 title: "RoleBinding"
-weight: 9
+weight: 8
 auto_generated: false
 ---
 <!--
@@ -18,7 +18,7 @@ api_metadata:
 content_type: "api_reference"
 description: "RoleBinding references a role, but does not contain it."
 title: "RoleBinding"
-weight: 9
+weight: 8
 auto_generated: true
 ---
 -->
@@ -47,7 +47,7 @@ RoleBinding 通过 Subjects 和所在的命名空间信息添加主体信息。
 
 - **roleRef** (RoleRef), required
 
-  RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+  RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.
 
   <a name="RoleRef"></a>
   *RoleRef contains information that points to the role being used*
@@ -57,7 +57,7 @@ RoleBinding 通过 Subjects 和所在的命名空间信息添加主体信息。
 - **roleRef** (RoleRef)，必需
   
   roleRef 可以引用当前命名空间中的 Role 或全局命名空间中的 ClusterRole。
-  如果无法解析 roleRef，则 Authorizer 必定返回一个错误。
+  如果无法解析 roleRef，则 Authorizer 必定返回一个错误。这个字段是不可变的。
   
   <a name="RoleRef"></a>
   **roleRef 包含指向正被使用的角色的信息。**

content/zh-cn/docs/reference/kubernetes-api/authorization-resources/role-v1.md

@@ -6,7 +6,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Role 是一个按命名空间划分的 PolicyRule 逻辑分组，可以被 RoleBinding 作为一个单元引用。"
 title: "Role"
-weight: 8
+weight: 7
 ---
 <!--
 api_metadata:
@@ -16,7 +16,7 @@ api_metadata:
 content_type: "api_reference"
 description: "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding."
 title: "Role"
-weight: 8
+weight: 7
 auto_generated: true
 -->