= Supported ServiceAccount token volume projection With this update, administrators can configure the ServiceAccount token mounted in workspace Pods as a link: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#serviceaccount-token-volume-projection [projected ServiceAccount token]. This enhancement enables administrators to set the `audience`, `mountPath`, and `expirationSeconds` of the token and enables federation such as link: https://cloud.google.com/iam/docs/workload-identity-federation [GCP workload identity federation]. Administrators can specify projected tokens properties in a `CheCluster` CR: [source,yaml,subs="+quotes"] ---- spec:   devEnvironments:     serviceAccountTokens:       - name: __<name>__         mounthPath: __<absolute_path_in_the_container>__         audience: __<audience>__         expirationSeconds: __<positive_integer>__         path: __<path_relative_to_the_mountpath>__ ----