From 89d69ab219227a5b00a43641037451363a46970e Mon Sep 17 00:00:00 2001
From: Josh Ellithorpe <quest@mac.com>
Date: Sun, 16 Jul 2017 15:37:40 -0700
Subject: [PATCH] Add UDP support to Kubernetes configs

---
 README.md             |  2 ++
 kube/dnscrypt-srv.yml | 21 +++++++++++++++++++--
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 9798095..f366dce 100644
--- a/README.md
+++ b/README.md
@@ -132,7 +132,9 @@ a persistent disk named `dnscrypt-keys` on GCE. You will need to adjust the volu
 definition on other platforms. Once that is setup, you can have a dnscrypt server up
 in minutes.
 
+* Create a static IP on GCE. This will be used for the LoadBalancer.
 * Edit `kube/dnscrypt-init-job.yml` and change `example.com` to your desired hostname.
+* Edit `kube/dnscrypt-srv.yml` and change `loadBalancerIP` to your static IP.
 * Run `kubectl create -f kube/dnscrypt-init-job.yml` to setup your keys.
 * Run `kubectl create -f kube/dnscrypt-deployment.yml` to deploy the dnscrypt server.
 * Run `kubectl create -f kube/dnscrypt-srv.yml` to expose your server to the world.
diff --git a/kube/dnscrypt-srv.yml b/kube/dnscrypt-srv.yml
index a670c8c..2589d0f 100644
--- a/kube/dnscrypt-srv.yml
+++ b/kube/dnscrypt-srv.yml
@@ -1,12 +1,29 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: dnscrypt
+  name: dnscrypt-tcp
   namespace: default
 spec:
   ports:
-    - port: 443
+    - protocol: TCP
+      port: 443
       targetPort: 443
   selector:
     service: dnscrypt
   type: LoadBalancer
+  loadBalancerIP: 0.0.0.0
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dnscrypt-udp
+  namespace: default
+spec:
+  ports:
+    - protocol: UDP
+      port: 443
+      targetPort: 443
+  selector:
+    service: dnscrypt
+  type: LoadBalancer
+  loadBalancerIP: 0.0.0.0