Projected volume
A projected volume is a Kubernetes volume that combines data from multiple sources and presents it to a pod through one mounted directory.
Kubernetes in Action, Second Edition
A projected volume is a Kubernetes volume that combines data from multiple sources, such as ConfigMaps, Secrets, and the Downward API, into one mounted directory.
- How it is used
- Combines configuration, credentials, and Pod metadata into one container-mounted directory.
- How deep it goes
- Defines source aggregation and demonstrates paths, permissions, and output, but does not detail implementation internals.
- Examples
- Uses an Envoy configuration, TLS certificate and key, directory listings, and the built-in kube-api-access volume.
- What you can do after
- Apply it via a Pod manifest that selects source keys, assigns destination paths, and sets file permissions.
Read how Kubernetes in Action, Second Edition explains projected volume →
Acing the Certified Kubernetes Administrator Exam, Second Edition
A Kubernetes volume type that presents projected sources such as service-account credentials to a pod.
- How it is used
- Mounts Service Account credentials into pods so applications can authenticate to the Kubernetes API.
- How deep it goes
- Explains credential delivery, mount paths, token inspection, and disabling automount, but not projected-volume configuration internals.
- Examples
- Uses nginx pod YAML, kubectl exec, and token output to verify the mounted credential.
- What you can do after
- Operate projected credentials through kubectl inspection and verify whether a pod receives its Service Account token.
Related concepts
- cryptographic keyuses · A cryptographic key is a value supplied to a cryptographic algorithm to control operations such as encryption, decryption, signing, authentication, or verification.
- configmapuses · A ConfigMap is a Kubernetes API resource that stores non-confidential configuration data as key-value pairs for use by workloads and other cluster components.
- downward apiuses · The Kubernetes Downward API exposes selected pod and container metadata, resource information, specification fields, and status fields through environment variables or files.
- volumekind of · A volume is a logical storage resource that provides capacity for storing and accessing data, often by making it available to an operating system or application.
- configmap volumealternative to · A ConfigMap volume is a read-only Kubernetes volume that exposes ConfigMap data to containers as mounted files.
- kube-api-access volumeincludes · The kube-api-access volume is a built-in projected volume that provides a pod with credentials and cluster information for accessing the Kubernetes API.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.