pulumi-kubernetes-kotlin/com.pulumi.kubernetes.core.v1.kotlin.inputs/ServiceAccountTokenProjectionArgs

ServiceAccountTokenProjectionArgs

data class ServiceAccountTokenProjectionArgs(val audience: Output<String>? = null, val expirationSeconds: Output<Int>? = null, val path: Output<String>) : ConvertibleToJava<ServiceAccountTokenProjectionArgs>

ServiceAccountTokenProjection represents a projected service account token volume. This projection can be used to insert a service account token into the pods runtime filesystem for use against APIs (Kubernetes API Server or otherwise).

Constructors

constructor(audience: Output<String>? = null, expirationSeconds: Output<Int>? = null, path: Output<String>)

Properties

audience

val audience: Output<String>? = null

audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.

expirationSeconds

val expirationSeconds: Output<Int>? = null

expirationSeconds is the requested duration of validity of the service account token. As the token approaches expiration, the kubelet volume plugin will proactively rotate the service account token. The kubelet will start trying to rotate the token if the token is older than 80 percent of its time to live or if the token is older than 24 hours.Defaults to 1 hour and must be at least 10 minutes.

path

val path: Output<String>

path is the path relative to the mount point of the file to project the token into.

Functions

toJava

open override fun toJava(): ServiceAccountTokenProjectionArgs