apiVersion: batch/v1 kind: Job metadata: name: dnscrypt-init spec: template: metadata: name: dnscrypt-init spec: containers: - name: dnscrypt-init image: jedisct1/dnscrypt-server command: ["/entrypoint.sh", "init", "-A", "-P", "0.0.0.0:9100", "-N", "example.com", "-E", "192.0.2.53:443"] volumeMounts: - name: dnscrypt-keys mountPath: /opt/encrypted-dns/etc/keys restartPolicy: Never volumes: - name: dnscrypt-keys gcePersistentDisk: pdName: dnscrypt-keys fsType: ext4