diff --git a/services/maintenance/metis-deployment.yaml b/services/maintenance/metis-deployment.yaml
index cf725d94..3bf11907 100644
--- a/services/maintenance/metis-deployment.yaml
+++ b/services/maintenance/metis-deployment.yaml
@@ -18,7 +18,7 @@ spec:
         prometheus.io/scrape: "true"
         prometheus.io/port: "8080"
         prometheus.io/path: "/metrics"
-        metis.bstein.dev/config-rev: "2026-04-02-02"
+        metis.bstein.dev/config-rev: "2026-04-05-01"
     spec:
       serviceAccountName: metis
       terminationGracePeriodSeconds: 30
@@ -48,6 +48,12 @@ spec:
                   name: metis-ssh-keys
                   key: brad_pub
                   optional: true
+            - name: METIS_SSH_KEY_BASTION
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: bastion_pub
+                  optional: true
             - name: METIS_SSH_KEY_HECATE_TETHYS
               valueFrom:
                 secretKeyRef: