PSP: clarify the case with pod update (#8310)
* pod-security-policy.md: clarify the case with pod update. * Minor grammatical fixes
This commit is contained in:
committed by
k8s-ci-robot
parent
f1eaf6ef73
commit
7745f0e0c5
@@ -153,7 +153,10 @@ controller selects policies in the following order:
|
|||||||
|
|
||||||
1. If any policies successfully validate the pod without altering it, they are
|
1. If any policies successfully validate the pod without altering it, they are
|
||||||
used.
|
used.
|
||||||
2. Otherwise, the first valid policy in alphabetical order is used.
|
2. If it is a pod creation request, then the first valid policy in alphabetical
|
||||||
|
order is used.
|
||||||
|
3. Otherwise, if it is a pod update request, an error is returned, because pod mutations
|
||||||
|
are disallowed during update operations.
|
||||||
|
|
||||||
## Example
|
## Example
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user