apiVersion: v1
kind: Pod
metadata:
  name: pod-with-default-volume
spec:
  containers:
  - image: k8s.gcr.io/test-webserver
    name: test-container
    volumeMounts:
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: default-token-wkknl
      readOnly: true
  volumes:
  - name: default-token-wkknl
    secret:
      defaultMode: 420
      secretName: default-token-wkknl