PSP: clarify the case with pod update (kubernetes#8310)

* pod-security-policy.md: clarify the case with pod update. * Minor grammatical fixes
bswartz · May 5, 2018 · 7745f0e · 7745f0e
1 parent f1eaf6e
commit 7745f0e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/docs/concepts/policy/pod-security-policy.md b/docs/concepts/policy/pod-security-policy.md
@@ -153,7 +153,10 @@ controller selects policies in the following order:
 
 1. If any policies successfully validate the pod without altering it, they are
    used.
-2. Otherwise, the first valid policy in alphabetical order is used.
+2. If it is a pod creation request, then the first valid policy in alphabetical
+   order is used.
+3. Otherwise, if it is a pod update request, an error is returned, because pod mutations
+   are disallowed during update operations.
 
 ## Example