diff --git a/services/veles/oneoffs/veles-secrets-ensure-job.yaml b/services/veles/oneoffs/veles-secrets-ensure-job.yaml
index ee447403..80f2d0af 100644
--- a/services/veles/oneoffs/veles-secrets-ensure-job.yaml
+++ b/services/veles/oneoffs/veles-secrets-ensure-job.yaml
@@ -32,7 +32,7 @@ spec:
       containers:
         - name: apply
           image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131
-          command: ["/bin/sh", "-c"]
+          command: ["/bin/bash", "-c"]
           args:
             - |
               set -euo pipefail