diff --git a/20-kube/20-pom-deploy.yaml b/20-kube/20-pom-deploy.yaml
--- a/20-kube/20-pom-deploy.yaml
+++ b/20-kube/20-pom-deploy.yaml
@@ -6,6 +6,7 @@ metadata:
   namespace: pomerium
 spec:
   replicas: 1
+  strategy: {type: Recreate}
   selector:
     matchLabels: { app.kubernetes.io/name: pomerium }
   template:
@@ -49,6 +50,7 @@ spec:
           volumeMounts:
             - { mountPath: /tmp, name: tmp }
             - { mountPath: /data/autocert, name: autocert }
+            - { mountPath: /.local, name: autocert }
       nodeSelector:
         kubernetes.io/os: linux
       securityContext: