23.3. Pod 规格示例

apiVersion: v1
kind: Pod
metadata:
  name: volume-test
spec:
  containers:
  - name: container-test
    image: busybox
    volumeMounts: 
    - name: all-in-one
      mountPath: "/projected-volume"
      readOnly: true 
  volumes: 
  - name: all-in-one 
    projected:
      defaultMode: 0400 
      sources:
      - secret:
          name: mysecret 
          items:
            - key: username
              path: my-group/my-username 
      - downwardAPI: 
          items:
            - path: "labels"
              fieldRef:
                fieldPath: metadata.labels
            - path: "cpu_limit"
              resourceFieldRef:
                containerName: container-test
                resource: limits.cpu
      - configMap: 
          name: myconfigmap
          items:
            - key: config
              path: my-group/my-config
              mode: 0777 

apiVersion: v1
kind: Pod
metadata:
  name: volume-test
spec:
  containers:
  - name: container-test
    image: busybox
    volumeMounts: 

    - name: all-in-one
      mountPath: "/projected-volume"

      readOnly: true 

  volumes: 

  - name: all-in-one 

    projected:
      defaultMode: 0400 

      sources:
      - secret:
          name: mysecret 

          items:
            - key: username
              path: my-group/my-username 

      - downwardAPI: 

          items:
            - path: "labels"
              fieldRef:
                fieldPath: metadata.labels
            - path: "cpu_limit"
              resourceFieldRef:
                containerName: container-test
                resource: limits.cpu
      - configMap: 

          name: myconfigmap
          items:
            - key: config
              path: my-group/my-config
              mode: 0777 

apiVersion: v1
kind: Pod
metadata:
  name: volume-test
spec:
  containers:
  - name: container-test
    image: busybox
    volumeMounts:
    - name: all-in-one
      mountPath: "/projected-volume"
      readOnly: true
  volumes:
  - name: all-in-one
    projected:
      defaultMode: 0755
      sources:
      - secret:
          name: mysecret
          items:
            - key: username
              path: my-group/my-username
      - secret:
          name: mysecret2
          items:
            - key: password
              path: my-group/my-password
              mode: 511

apiVersion: v1
kind: Pod
metadata:
  name: volume-test
spec:
  containers:
  - name: container-test
    image: busybox
    volumeMounts:
    - name: all-in-one
      mountPath: "/projected-volume"
      readOnly: true
  volumes:
  - name: all-in-one
    projected:
      defaultMode: 0755
      sources:
      - secret:
          name: mysecret
          items:
            - key: username
              path: my-group/my-username
      - secret:
          name: mysecret2
          items:
            - key: password
              path: my-group/my-password
              mode: 511