apiVersion: batch/v1 kind: Job metadata: name: cert-copy spec: template: spec: containers: - name: cert-copy image: alpine command: ["cp", "-rL", "/var/run/certs/..data/tls.crt", "/var/run/certs-copy/"] # command: ["tail", "-f", "/dev/null"] volumeMounts: - name: certs mountPath: /var/run/certs readOnly: true - name: write-to-volume mountPath: /var/run/certs-copy volumes: - name: certs secret: secretName: {{ include "common.repositorycert" . }} - name: write-to-volume hostPath: path: /tmp restartPolicy: Never backoffLimit: 4