From 7745f0e0c5c68f4f3d99347d1a0168e643e70f3a Mon Sep 17 00:00:00 2001 From: Vyacheslav Semushin Date: Sat, 5 May 2018 14:37:52 +0200 Subject: [PATCH] PSP: clarify the case with pod update (#8310) * pod-security-policy.md: clarify the case with pod update. * Minor grammatical fixes --- docs/concepts/policy/pod-security-policy.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/concepts/policy/pod-security-policy.md b/docs/concepts/policy/pod-security-policy.md index 5c80934751..d73baed1cc 100644 --- a/docs/concepts/policy/pod-security-policy.md +++ b/docs/concepts/policy/pod-security-policy.md @@ -153,7 +153,10 @@ controller selects policies in the following order: 1. If any policies successfully validate the pod without altering it, they are used. -2. Otherwise, the first valid policy in alphabetical order is used. +2. If it is a pod creation request, then the first valid policy in alphabetical + order is used. +3. Otherwise, if it is a pod update request, an error is returned, because pod mutations + are disallowed during update operations. ## Example