apiVersion: v1
kind: Pod
metadata:
    name: nginx
spec:
    containers:
        - image: nginx
          name: nginx-ctr
          volumeMounts:
              - mountPath: /var/run/secrets/tokens
                name: vault-token
    serviceAccountName: build-robot
    volumes:
        - name: vault-token
          projected:
              sources:
                  - serviceAccountToken:
                      path: vault-token
                      expirationSeconds: 7200
                      audience: vault
