This is accessible via the volumeDevices container field in pod specs, and the volumeMode field in persistent volume and persistent volume claims definitions. (#71167, @msau42) TokenReview now supports audience validation of tokens with audiences other than the kube-apiserver. (#62692, @mike...