diff --git a/services/keycloak/synapse-oidc-secret-ensure-job.yaml b/services/keycloak/synapse-oidc-secret-ensure-job.yaml
index 6468fd8..69a6698 100644
--- a/services/keycloak/synapse-oidc-secret-ensure-job.yaml
+++ b/services/keycloak/synapse-oidc-secret-ensure-job.yaml
@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: synapse-oidc-secret-ensure-1
+  name: synapse-oidc-secret-ensure-2
   namespace: sso
 spec:
   backoffLimit: 0
@@ -13,12 +13,13 @@ spec:
       restartPolicy: Never
       containers:
         - name: apply
-          image: alpine:3.20
+          image: bitnami/kubectl:latest
           command: ["/bin/sh", "-c"]
           args:
             - |
               set -euo pipefail
-              apk add --no-cache curl jq >/dev/null
+              apt-get update >/dev/null
+              apt-get install -y curl jq >/dev/null
 
               KC_URL="http://keycloak.sso.svc.cluster.local"
               ACCESS_TOKEN=""