Kubernetes projected volumes

A projected volume maps several existing volume sources into the same directory. (doc)

Currently, the following types of volume sources can be projected:

• secret
• downwardAPI
• configMap
• serviceAccountToken

 volumes:
 - name: persistent-storage
   persistentVolumeClaim:
     claimName: pvc-ebs-redis-api
 - name: kube-api-access-jhnds
   projected:
     defaultMode: 420
     sources:
     - serviceAccountToken:
         expirationSeconds: 3607
         path: token
     - configMap:
         items:
         - key: ca.crt
           path: ca.crt
         name: kube-root-ca.crt
     - downwardAPI:
         items:
         - fieldRef:
             apiVersion: v1
             fieldPath: metadata.namespace
           path: namespace

kubectl get psp
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
NAME                    PRIV    CAPS   SELINUX    RUNASUSER   FSGROUP    SUPGROUP   READONLYROOTFS   VOLUMES
gce.gke-metrics-agent   false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,secret,configMap
grafana                 false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            configMap,emptyDir,projected,secret,downwardAPI,persistentVolumeClaim

See also

• Kubernetes volumes: volumeMounts:, mountPath, snapshots, spec.volumes, projected volumes, PVC
• Kubernetes storage, storage classes, PersistentVolume (PV), PVC, CSI, kind: StorageClass, kind: PersistentVolumeClaim, kind: PersistentVolume, kubectl [ get | describe | edit ] pvc, volumeClaimTemplates:, kubectl patch pv, FailedMount, Volume Expansion, Volume Cloning, snapshots, ExtraVolumes, NotTriggerScaleUp, volumePVCDataSource, AllowVolumeExpansion, EKS storage, provisioner, Storage Capacity Tracking, VolumeBinding, VolumeClaimTemplate, storage.k8s.io, CKA Storage, DoKC, emptyDir, Volume populators, storageclass.kubernetes.io, Rook, Longhorn, projected volumes