better spot

Signed-off-by: Miek Gieben <miek@miek.nl>
psviderski · miekg · Jun 2, 2026 · Jun 3, 2026 · Jun 3, 2026 · Jun 3, 2026
commit eae75bacae26bf1e9b64801f2df3a7a917458aba
diff --git a/pkg/api/secret.go b/pkg/api/secret.go
@@ -3,6 +3,7 @@ package api
 import (
 	"fmt"
 	"path/filepath"
+	"sort"
 )
 
 // SecretSpec defines a secret object that can be mounted into containers
@@ -38,6 +39,13 @@ func (s *SecretMount) Validate() error {
 	return nil
 }
 
+// sortSecretMounts sorts a slice of SecretMount instances.
+func sortSecretMounts(mounts []SecretMount) {
+	sort.Slice(mounts, func(i, j int) bool {
+		return mounts[i].Compare(&mounts[j].ConfigMount) < 0
+	})
+}
+
 // ValidateSecretsAndMounts takes secret specs and secret mounts and validates that all mounts refer to existing specs
 func ValidateSecretsAndMounts(secrets []SecretSpec, mounts []SecretMount) error {
 	secretMap := make(map[string]struct{})