A symbolic link is a filesystem object that points to another path instead of storing the target data. In Kubernetes ConfigMap and Secret volumes, links help expose updated files atomically. section 9.5.2
ConfigMap volumes use a versioned directory and links such as ..data to select the current version; individual files link through that directory to their targets. section 9.5.2
Inspecting a mounted ConfigMap
Running ls -lA inside the container shows envoy.yaml -> ..data/envoy.yaml and ..data -> ..2020_11_14_11_47_45.728287366. These links reveal how the mounted configuration selects a versioned file set. section 9.5.2
$ kubectl exec kiada-ssl -c envoy -- ls -lA /etc/envoy total 4 drwxr-xr-x ... ..2020_11_14_11_47_45.728287366 #1 lrwxrwxrwx ... ..data -> ..2020_11_14_11_47_45.728287366 #2 lrwxrwxrwx ... envoy.yaml -> ..data/envoy.yaml #3
Inspect the directory listing that shows the versioned directory, the ..data link, and the file link. section 9.5.2
Link permissions are displayed as rwxrwxrwx and do not determine access. Follow the links with ls -lL to inspect the target files’ meaningful permissions and ownership. section 9.5.4
