Skip to main content

merge_security_context

Function merge_security_context 

Source
pub fn merge_security_context(
    base: &SecurityContext,
    over: &SecurityContext,
) -> SecurityContext
Expand description

Field-wise overlay of container [SecurityContext] over onto base: each Some field in over wins, unset fields inherit base; capabilities deep-merge via merge_capabilities (ADR-0004 §2).

The struct literal is exhaustive (no ..base tail) on purpose: when the pinned k8s-openapi SecurityContext gains a field, this stops compiling until the new field is considered — the same discipline as the exhaustive-match enum thesis (§5.5).