projected 示例
projected 示例
volumes:
- name: all-in-one
projected:
defaultMode: 0440
sources:
- secret:
name: app-secret
- configMap:
name: app-config
- downwardAPI:
items:
- path: pod-name
fieldRef:
fieldPath: metadata.name
- serviceAccountToken:
path: token
expirationSeconds: 3600
audience: vault验证
验证
kubectl exec -it web-x -- ls -l /var/run/projected各 source 可用 items/path 精细控制落盘文件名；目录权限默认由 defaultMode 决定。