Kubernetes projected volumes

• https://kubernetes.io/docs/concepts/storage/projected-volumes/

A projected volume maps several existing volume sources into the same directory.

Currently, the following types of volume sources can be projected:

• secret
• downwardAPI
• configMap
• serviceAccountToken

 volumes:
 - name: persistent-storage
   persistentVolumeClaim:
     claimName: pvc-ebs-redis-api
 - name: kube-api-access-jhnds
   projected:
     defaultMode: 420
     sources:
     - serviceAccountToken:
         expirationSeconds: 3607
         path: token
     - configMap:
         items:
         - key: ca.crt
           path: ca.crt
         name: kube-root-ca.crt
     - downwardAPI:
         items:
         - fieldRef:
             apiVersion: v1
             fieldPath: metadata.namespace
           path: namespace

kubectl get psp
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
NAME                    PRIV    CAPS   SELINUX    RUNASUSER   FSGROUP    SUPGROUP   READONLYROOTFS   VOLUMES
gce.gke-metrics-agent   false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,secret,configMap
grafana                 false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            configMap,emptyDir,projected,secret,downwardAPI,persistentVolumeClaim

See also

• Kubernetes storage, storage classes, PersistentVolume (PV), PVC, CSI, kind: StorageClass, kind: PersistentVolumeClaim, kind: PersistentVolume, kubectl [ get | describe | edit ] pvc, volumeClaimTemplates:, kubectl patch pv, FailedMount, Volume Expansion, Volume Cloning, snapshots, ExtraVolumes, NotTriggerScaleUp, volumePVCDataSource, AllowVolumeExpansion, EKS storage, provisioner, Storage Capacity Tracking, VolumeBinding, VolumeClaimTemplate, storage.k8s.io, CKA Storage, DoKC, EmptyDir, Volume populators