Difference between revisions of "Kubernetes projected volumes"

From wikieduonline
Jump to navigation Jump to search
Tags: Mobile web edit, Mobile edit
Tags: Mobile web edit, Mobile edit
Line 1: Line 1:
 
{{lc}}
 
{{lc}}
 +
 +
<pre>
 +
  volumes:
 +
  - name: persistent-storage
 +
    persistentVolumeClaim:
 +
      claimName: pvc-ebs-redis-api-instance-manager-ue5-dev
 +
  - name: kube-api-access-jhnds
 +
    projected:
 +
      defaultMode: 420
 +
      sources:
 +
      - serviceAccountToken:
 +
          expirationSeconds: 3607
 +
          path: token
 +
      - configMap:
 +
          items:
 +
          - key: ca.crt
 +
            path: ca.crt
 +
          name: kube-root-ca.crt
 +
      - downwardAPI:
 +
          items:
 +
          - fieldRef:
 +
              apiVersion: v1
 +
              fieldPath: metadata.namespace
 +
            path: namespace
 +
</pre>
  
  
Line 10: Line 35:
  
  
 
+
== See also ==
{{K8s}}
+
* {{K8s}}

Revision as of 10:05, 8 March 2023

  volumes:
  - name: persistent-storage
    persistentVolumeClaim:
      claimName: pvc-ebs-redis-api-instance-manager-ue5-dev
  - name: kube-api-access-jhnds
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace


kubectl get psp
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
NAME                    PRIV    CAPS   SELINUX    RUNASUSER   FSGROUP    SUPGROUP   READONLYROOTFS   VOLUMES
gce.gke-metrics-agent   false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,secret,configMap
grafana                 false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            configMap,emptyDir,projected,secret,downwardAPI,persistentVolumeClaim


See also

Advertising: