pub fn merge_security_context(
base: &SecurityContext,
over: &SecurityContext,
) -> SecurityContextExpand description
Field-wise overlay of container [SecurityContext] over onto base: each Some
field in over wins, unset fields inherit base; capabilities deep-merge via
merge_capabilities (ADR-0004 §2).
The struct literal is exhaustive (no ..base tail) on purpose: when the pinned
k8s-openapi SecurityContext gains a field, this stops compiling until the new field
is considered — the same discipline as the exhaustive-match enum thesis (§5.5).