Skip to main content

enforce_security_context_invariants

kopiur_api::invariants

Function enforce_security_context_invariants 

Source 
pub fn enforce_security_context_invariants(
    sc: SecurityContext,
    psc: Option<PodSecurityContext>,
) -> (SecurityContext, Option<PodSecurityContext>)
Expand description

Enforce every security-context invariant on a fully-resolved mover (container, pod) context pair, returning a kubelet/apiserver-valid pair. Pure; the composition order is irrelevant because the invariants touch disjoint fields. Idempotent.