apiVersion: batch/v1
kind: Job
metadata:
  name: dnscrypt-init
spec:
  template:
    metadata:
      name: dnscrypt-init
    spec:
      containers:
      - name: dnscrypt-init
        image: jedisct1/dnscrypt-server
        command: ["/entrypoint.sh", "init", "-A", "-P", "0.0.0.0:9100", "-N", "example.com", "-E", "192.0.2.53:443"]
        volumeMounts:
          - name: dnscrypt-keys
            mountPath: /opt/encrypted-dns/etc/keys
      restartPolicy: Never
      volumes:
        - name: dnscrypt-keys
          gcePersistentDisk:
            pdName: dnscrypt-keys
            fsType: ext4