diff --git a/.drone.yml b/.drone.yml
index 4a2fbfd..2e3c9c8 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -23,9 +23,8 @@ steps:
     image: bitnami/kubectl:latest
     environment:
       HOME: /tmp/drone-home
-      KUBECONFIG: /tmp/drone-home/.kube/config
-      KUBECONFIG_DATA:
-        from_secret: K3S_KUBECONFIG
+      KUBECONFIG:
+        from_secret: KUBECONFIG
 
       AWS_ACCESS_KEY_ID:        { from_secret: AWS_ACCESS_KEY_ID }
       AWS_ENDPOINT:             { from_secret: AWS_ENDPOINT }
@@ -47,25 +46,30 @@ steps:
 
     commands:
       - mkdir -p /tmp/drone-home/.kube
-      - echo "$KUBECONFIG_DATA" | base64 -d > /tmp/drone-home/.kube/config
+      - echo "$KUBECONFIG" > /tmp/drone-home/.kube/config
+      - chmod 600 /tmp/drone-home/.kube/config
 
-      - echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID"        >  .env.k8s
-      - echo "AWS_ENDPOINT=$AWS_ENDPOINT"                 >> .env.k8s
-      - echo "AWS_REGION=$AWS_REGION"                     >> .env.k8s
+      # 🔎 valida conexão
+      - kubectl config get-contexts
+      - kubectl get ns
+
+      - echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID"          >  .env.k8s
+      - echo "AWS_ENDPOINT=$AWS_ENDPOINT"                   >> .env.k8s
+      - echo "AWS_REGION=$AWS_REGION"                       >> .env.k8s
       - echo "AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY" >> .env.k8s
-      - echo "CORS_ORIGINS=$CORS_ORIGINS"                 >> .env.k8s
-      - echo "DB_HOST=$DB_HOST"                           >> .env.k8s
-      - echo "DB_NAME=$DB_NAME"                           >> .env.k8s
-      - echo "DB_PASSWORD=$DB_PASSWORD"                   >> .env.k8s
-      - echo "DB_PORT=$DB_PORT"                           >> .env.k8s
-      - echo "DB_SSLMODE=$DB_SSLMODE"                     >> .env.k8s
-      - echo "DB_USER=$DB_USER"                           >> .env.k8s
-      - echo "ENV=$ENV"                                   >> .env.k8s
-      - echo "JWT_SECRET=$JWT_SECRET"                     >> .env.k8s
-      - echo "MAX_UPLOAD_CAD_SIZE=$MAX_UPLOAD_CAD_SIZE"   >> .env.k8s
-      - echo "PORT=$PORT"                                 >> .env.k8s
-      - echo "S3_BUCKET=$S3_BUCKET"                       >> .env.k8s
-      - echo "UPLOAD_DIR=$UPLOAD_DIR"                     >> .env.k8s
+      - echo "CORS_ORIGINS=$CORS_ORIGINS"                   >> .env.k8s
+      - echo "DB_HOST=$DB_HOST"                             >> .env.k8s
+      - echo "DB_NAME=$DB_NAME"                             >> .env.k8s
+      - echo "DB_PASSWORD=$DB_PASSWORD"                     >> .env.k8s
+      - echo "DB_PORT=$DB_PORT"                             >> .env.k8s
+      - echo "DB_SSLMODE=$DB_SSLMODE"                       >> .env.k8s
+      - echo "DB_USER=$DB_USER"                             >> .env.k8s
+      - echo "ENV=$ENV"                                     >> .env.k8s
+      - echo "JWT_SECRET=$JWT_SECRET"                       >> .env.k8s
+      - echo "MAX_UPLOAD_CAD_SIZE=$MAX_UPLOAD_CAD_SIZE"     >> .env.k8s
+      - echo "PORT=$PORT"                                   >> .env.k8s
+      - echo "S3_BUCKET=$S3_BUCKET"                         >> .env.k8s
+      - echo "UPLOAD_DIR=$UPLOAD_DIR"                       >> .env.k8s
 
       - kubectl -n gohorsejobs delete secret backend-secrets --ignore-not-found
       - kubectl -n gohorsejobs create secret generic backend-secrets --from-env-file=.env.k8s
@@ -74,13 +78,14 @@ steps:
     image: bitnami/kubectl:latest
     environment:
       HOME: /tmp/drone-home
-      KUBECONFIG: /tmp/drone-home/.kube/config
-      KUBECONFIG_DATA:
-        from_secret: K3S_KUBECONFIG
+      KUBECONFIG:
+        from_secret: KUBECONFIG
 
     commands:
       - mkdir -p /tmp/drone-home/.kube
-      - echo "$KUBECONFIG_DATA" | base64 -d > /tmp/drone-home/.kube/config
+      - echo "$KUBECONFIG" > /tmp/drone-home/.kube/config
+      - chmod 600 /tmp/drone-home/.kube/config
 
+      - kubectl get pods -n gohorsejobs
       - kubectl apply -n gohorsejobs -f k8s/backend-deployment.yaml
       - kubectl apply -n gohorsejobs -f k8s/backend-service.yaml