kubernetes · k8s-ci-robot · Oct 2, 2019 · Oct 1, 2019
diff --git a/content/en/docs/tutorials/clusters/apparmor.md b/content/en/docs/tutorials/clusters/apparmor.md
@@ -166,7 +166,18 @@ k8s-apparmor-example-deny-write (enforce)
 First, we need to load the profile we want to use onto our nodes. The profile we'll use simply
 denies all file writes:
 
-{{< code language="text" file="deny-write.profile" >}}
+```shell
+#include <tunables/global>
+
+profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
+  #include <abstractions/base>
+
+  file,
+
+  # Deny all file writes.
+  deny /** w,
+}
+```
 
 Since we don't know where the Pod will be scheduled, we'll need to load the profile on all our
 nodes. For this example we'll just use SSH to install the profiles, but other approaches are

diff --git a/content/en/docs/tutorials/clusters/deny-write.profile b/content/en/docs/tutorials/clusters/deny-write.profile
diff --git a/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md b/content/zh/docs/reference/setup-tools/kubeadm/generated/README.md
@@ -1,3 +1 @@
-<!-- All files in this directory are auto-generated from other repos. **Do not edit them manually. You must edit them in their upstream repo.**
- -->
 此目录下的所有文件都是从其他仓库自动生成的。 **不要人工编辑它们。 您必须在上游仓库中编辑它们**