<p>I have generated the access token and placed in below mentioned mount path and this token need to be included in the Authorization header when making a request against the retrieve secret endpoint.</p>
<p>How can we achieve it in yaml scripting</p>
<pre class="lang-yaml prettyprint-override"><code>volumeMounts:
  - mountPath: /run/test
    name: conjur-access-token
    readOnly: true
</code></pre>

GPK327
<p>This question is referencing CyberArk's <a href="https://conjur.org" rel="nofollow noreferrer">Conjur Secrets Manager</a>'s <a href="https://docs.cyberark.com/Product-Doc/OnlineHelp/AAM-DAP/Latest/en/Content/Integrations/k8s-ocp/cjr-k8s-authn-client.htm" rel="nofollow noreferrer">Kubernetes authenticator</a>. It uses a sidecar authenticator client to keep an authenticated session token for Conjur's API refreshed in a shared volume mount with an application container running within a Kubernetes pod. This allows the application container to request secret values Just-in-Time (JiT) from the Conjur API with a single API call.</p>
<p>There is a file located at <code>/run/test/conjur-access-token</code> (according to the manifest snippet you provided) that contains the authenticated session token to use to connect to the Conjur API. Your application container needs to read <code>/run/test/conjur-access-token</code> and use it in the Authorization header as a Token-based authorization. To use <code>curl</code>, this would look like:</p>
<p><code>curl -H &quot;Authorization: Token token='$(cat /run/test/conjur-access-token)'&quot; https://conjur.example.com/secrets/myorg/variable/prod%2Fdb%2Fpassword</code></p>
<p>Where:</p>
<ul>
<li><code>/run/test/conjur-access-token</code> is the path to the shared volume mount of the application container and sidecar Kubernetes authenticator client.</li>
<li><code>conjur.example.com</code> is the Base URL for your Conjur Follower in the Kubernetes cluster (or outside, if that's the deployment method).</li>
<li><code>myorg</code> is the organzation account configured at the time of Conjur deployment and configuration.</li>
<li><code>prod%2Fdb%2Fpassword</code> is the URLified secret variable path in Conjur. This would be referenced otherwise as <code>prod/db/password</code> but since forward-slashes are part of URL/URI, we need this URLified to <code>%2F</code>.</li>
</ul>
