diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 774f13d..50be965 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -39,7 +39,10 @@ kubernetes:
     - turniere-deploy
   stage: deploy
   only:
-    - master
+    refs:
+      - master
+    variables:
+      - $FORCE_DEPLOY
   image: ruby
   variables:
     KUBERNETES_SERVICE_ACCOUNT_OVERWRITE: gitlab-deploy
@@ -51,14 +54,17 @@ kubernetes:
     - kubectl config set-credentials sa --token="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)"
     - kubectl config set-context local --cluster=k8s --user=sa --namespace=turniere-backend
     - gem install krane
-    - krane render -f kubernetes --current-sha "$CI_COMMIT_SHA" | krane deploy turniere-backend local -f -
+    - krane render -f kubernetes --current-sha "$CI_COMMIT_SHA" | krane deploy turniere-backend local -f kubernetes/secrets.ejson -
 
 deploy_watchtower:
   tags:
     - docker
   stage: deploy
   only:
-    - master
+    refs:
+      - master
+    variables:
+      - $FORCE_DEPLOY
   image: docker
   services:
     - docker:dind