diff --git a/services/comms/mas-db-ensure-job.yaml b/services/comms/mas-db-ensure-job.yaml
index f0237f6..5d30268 100644
--- a/services/comms/mas-db-ensure-job.yaml
+++ b/services/comms/mas-db-ensure-job.yaml
@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: mas-db-ensure-12
+  name: mas-db-ensure-13
   namespace: comms
 spec:
   backoffLimit: 1
@@ -36,9 +36,10 @@ spec:
                 exit 1
               fi
 
-              kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \
-                -c "CREATE ROLE mas LOGIN PASSWORD :'mas_pass';" || true
-              kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres -v mas_pass="${MAS_PASS}" \
-                -c "ALTER ROLE mas WITH PASSWORD :'mas_pass';"
+              MAS_PASS_SQL="$(printf '%s' "${MAS_PASS}" | sed "s/'/''/g")"
+              kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
+                -c "CREATE ROLE mas LOGIN PASSWORD '${MAS_PASS_SQL}';" || true
+              kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
+                -c "ALTER ROLE mas WITH PASSWORD '${MAS_PASS_SQL}';"
               kubectl -n postgres exec -i "${POD_NAME}" -- psql -U postgres -d postgres \
                 -c "CREATE DATABASE mas OWNER mas;" || true