apiVersion: v1
kind: Pod
metadata:
  name: nginx
spec:
  containers:
  - image: k8s.gcr.io/e2e-test-images/nginx:1.14-1
    name: nginx
    volumeMounts:
    - mountPath: /var/run/secrets/tokens
      name: token
  volumes:
  - name: token
    projected:
      sources:
      - serviceAccountToken:
          path: token
          expirationSeconds: 7200
