Difference between revisions of "Kubernetes projected volumes"

From wikieduonline
Jump to navigation Jump to search
(Created page with " kubectl get psp Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+ NAME PRIV CAPS SELINUX RUNASUSER...")
 
Tags: Mobile web edit, Mobile edit
 
(11 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
* https://kubernetes.io/docs/concepts/storage/projected-volumes/
 +
 +
A projected volume maps several existing volume sources into the same directory.
 +
 +
Currently, the following types of volume sources can be projected:
 +
* <code>[[secret]]</code>
 +
* <code>[[downwardAPI]]</code>
 +
* <code>[[configMap]]</code>
 +
* <code>[[serviceAccountToken]]</code>
 +
 +
 +
 +
  volumes:
 +
  - name: persistent-storage
 +
    persistentVolumeClaim:
 +
      claimName: pvc-ebs-redis-api
 +
  - name: kube-api-access-jhnds
 +
    projected:
 +
      [[defaultMode]]: 420
 +
      sources:
 +
      - [[serviceAccountToken]]:
 +
          expirationSeconds: 3607
 +
          path: token
 +
      - [[configMap]]:
 +
          items:
 +
          - key: ca.crt
 +
            path: ca.crt
 +
          name: kube-root-ca.crt
 +
      - [[downwardAPI]]:
 +
          items:
 +
          - fieldRef:
 +
              apiVersion: v1
 +
              fieldPath: metadata.namespace
 +
            path: namespace
  
  
Line 7: Line 41:
 
  [[gce]].[[gke-metrics-agent]]  false          RunAsAny  RunAsAny    RunAsAny  RunAsAny  false            hostPath,secret,configMap
 
  [[gce]].[[gke-metrics-agent]]  false          RunAsAny  RunAsAny    RunAsAny  RunAsAny  false            hostPath,secret,configMap
 
  grafana                false          RunAsAny  RunAsAny    RunAsAny  RunAsAny  false            [[configMap]],[[emptyDir]],[[projected]],[[secret]],[[downwardAPI]],[[persistentVolumeClaim]]
 
  grafana                false          RunAsAny  RunAsAny    RunAsAny  RunAsAny  false            [[configMap]],[[emptyDir]],[[projected]],[[secret]],[[downwardAPI]],[[persistentVolumeClaim]]
 +
 +
 +
 +
== See also ==
 +
* {{K8s storage}}
 +
 +
[[Category:K8s]]

Latest revision as of 10:12, 8 March 2023

A projected volume maps several existing volume sources into the same directory.

Currently, the following types of volume sources can be projected: 


 volumes:
 - name: persistent-storage
   persistentVolumeClaim:
     claimName: pvc-ebs-redis-api
 - name: kube-api-access-jhnds
   projected:
     defaultMode: 420
     sources:
     - serviceAccountToken:
         expirationSeconds: 3607
         path: token
     - configMap:
         items:
         - key: ca.crt
           path: ca.crt
         name: kube-root-ca.crt
     - downwardAPI:
         items:
         - fieldRef:
             apiVersion: v1
             fieldPath: metadata.namespace
           path: namespace



kubectl get psp
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
NAME                    PRIV    CAPS   SELINUX    RUNASUSER   FSGROUP    SUPGROUP   READONLYROOTFS   VOLUMES
gce.gke-metrics-agent   false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,secret,configMap
grafana                 false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            configMap,emptyDir,projected,secret,downwardAPI,persistentVolumeClaim


See also[edit]

Retrieved from "https://www.wikieduonline.com/index.php?title=Kubernetes_projected_volumes&oldid=230996"

Advertising: