Projected volume

Q: How deeply does Acing the Certified Kubernetes Administrator Exam, Second Edition cover projected volume?

Explains credential delivery, mount paths, token inspection, and disabling automount, but not projected-volume configuration internals.

As explained in Acing the Certified Kubernetes Administrator Exam, Second Edition

A Kubernetes volume type that presents projected sources such as service-account credentials to a pod.

A projected volume mounts short-lived Service Account credentials into a pod. Modern Kubernetes obtains these credentials through the TokenRequest API rather than automatically creating long-term token Secrets. section 3.3

Pods commonly receive the default Service Account at /var/run/secrets/kubernetes.io/serviceaccount, allowing applications to authenticate to the Kubernetes API. section 3.3

Verify the mounted credential

Run kubectl get po nginx -o yaml | grep volumeMounts -A14 to inspect the mount, then use kubectl exec -it nginx -- sh and cat /var/run/secrets/kubernetes.io/serviceaccount/token to view the token.

How Acing the Certified Kubernetes Administrator Exam, Second Edition covers it

Cover of Acing the Certified Kubernetes Administrator Exam, Second Edition

liveBook manning.com

Read Acing the Certified Kubernetes Administrator Exam, Second Edition on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Kubernetes in Action, Second EditionA projected volume is a Kubernetes volume that combines data from multiple sources, such as ConfigMaps, Secrets, and the Downward API, into one mounted directory.

Compare how 2 books explain projected volume →

Related concepts

cryptographic keyuses · A cryptographic key is a value supplied to a cryptographic algorithm to control operations such as encryption, decryption, signing, authentication, or verification.
configmapuses · A ConfigMap is a Kubernetes API resource that stores non-confidential configuration data as key-value pairs for use by workloads and other cluster components.
downward apiuses · The Kubernetes Downward API exposes selected pod and container metadata, resource information, specification fields, and status fields through environment variables or files.
volumekind of · A volume is a logical storage resource that provides capacity for storing and accessing data, often by making it available to an operating system or application.
configmap volumealternative to · A ConfigMap volume is a read-only Kubernetes volume that exposes ConfigMap data to containers as mounted files.
kube-api-access volumeincludes · The kube-api-access volume is a built-in projected volume that provides a pod with credentials and cluster information for accessing the Kubernetes API.

This explainer was generated by Manning's knowledge graph from the text of Acing the Certified Kubernetes Administrator Exam, Second Edition. The section links point to the parts of the book it draws on.