diff --git a/kube/bchd-deployment.yml b/kube/bchd-deployment.yml
index df2fe0547..9827df401 100644
--- a/kube/bchd-deployment.yml
+++ b/kube/bchd-deployment.yml
@@ -4,7 +4,7 @@ metadata:
   namespace: default
   labels:
     service: bchd
-    version: 0.18.0
+    version: 0.20.0
   name: bchd
 spec:
   strategy:
@@ -19,27 +19,45 @@ spec:
         service: bchd
     spec:
       containers:
-      - env:
-        - name: BCHD_RPC_USER
-          valueFrom:
-            secretKeyRef:
-              name: bchd
-              key: rpcuser
-        - name: BCHD_RPC_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: bchd
-              key: rpcpass
-        image: zquestz/bchd:latest
-        command: ["bchd"]
-        args: ["-u", "$(BCHD_RPC_USER)", "-P", "$(BCHD_RPC_PASSWORD)", "--addrindex", "--txindex", "-b", "/data", "-C", "/data/bchd.conf"]
-        name: bchd
-        volumeMounts:
-          - mountPath: /data
-            name: bchd-data
-        resources:
-          requests:
-            memory: "3Gi"
+        - env:
+            - name: BCHD_RPC_USER
+              valueFrom:
+                secretKeyRef:
+                  name: bchd
+                  key: rpcuser
+            - name: BCHD_RPC_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: bchd
+                  key: rpcpass
+          image: zquestz/bchd:latest
+          command: ["bchd"]
+          args:
+            [
+              "-u",
+              "$(BCHD_RPC_USER)",
+              "-P",
+              "$(BCHD_RPC_PASSWORD)",
+              "--addrindex",
+              "--txindex",
+              "-b",
+              "/data",
+              "-C",
+              "/data/bchd.conf",
+            ]
+          name: bchd
+          volumeMounts:
+            - mountPath: /data
+              name: bchd-data
+            - name: bchd-config
+              mountPath: /data/rpc.cert
+              subPath: cert
+            - name: bchd-config
+              mountPath: /data/rpc.key
+              subPath: key
+          resources:
+            requests:
+              memory: "3Gi"
       restartPolicy: Always
       terminationGracePeriodSeconds: 600
       volumes:
@@ -47,3 +65,6 @@ spec:
           gcePersistentDisk:
             pdName: bchd-data
             fsType: ext4
+        - name: bchd-config
+          secret:
+            secretName: "bchd"
diff --git a/kube/bchd-secrets.yml b/kube/bchd-secrets.yml
index 234462c83..83f9a6c1c 100644
--- a/kube/bchd-secrets.yml
+++ b/kube/bchd-secrets.yml
@@ -6,3 +6,5 @@ type: Opaque
 data:
   rpcuser: YWRtaW4=
   rpcpass: aXRvbGR5b3V0b2NoYW5nZXRoaXM=
+  cert: YOUR_CERT
+  key: YOUR_KEY
\ No newline at end of file