Merge pull request #55766 from bergerhoffer/OSDOCS-1585-update

OSDOCS-1585: Changing query and fixing example output

Author: bergerhoffer

modules/security-context-constraints-psa-alert-eval.adoc

@@ -26,17 +26,15 @@ $ oc adm must-gather -- /usr/bin/gather_audit_logs
 +
 [source,terminal]
 ----
-$ zgrep -h pod-security.kubernetes.io/audit-violations must-gather.local.<archive_id>/quay*/audit_logs/kube-apiserver/*log.gz \
-  | jq -r 'select((.annotations["pod-security.kubernetes.io/audit-violations"] != null) and (.objectRef.resource=="pods")) | .objectRef.namespace + " " + .objectRef.name + " " + .objectRef.resource' \
+$ zgrep -h pod-security.kubernetes.io/audit-violations must-gather.local.<archive_id>/<image_digest_id>/audit_logs/kube-apiserver/*log.gz \
+  | jq -r 'select((.annotations["pod-security.kubernetes.io/audit-violations"] != null) and (.objectRef.resource=="pods")) | .objectRef.namespace + " " + .objectRef.name' \
   | sort | uniq -c
 ----
 +
-Replace `must-gather.local.<archive_id>` with the actual directory name.
+Replace `<archive_id>` and `<image_digest_id>` with the actual path names.
 +
 .Example output
 [source,text]
 ----
-15 ci namespace-ttl-controller deployments
- 1 ci-op-k5whzrsh rpm-repo-546f98d8b replicasets
- 1 ci-op-k5whzrsh rpm-repo deployments
+1 test-namespace my-pod
 ----