diff --git a/.gitea/workflows/cd-deploy.yml b/.gitea/workflows/cd-deploy.yml
index 4d7ff50..78ad54b 100644
--- a/.gitea/workflows/cd-deploy.yml
+++ b/.gitea/workflows/cd-deploy.yml
@@ -55,12 +55,23 @@ jobs:
           mkdir -p $HOME/.kube
           if echo "${{ secrets.KUBECONFIG }}" | grep -q "apiVersion"; then
             echo "Detected plain text KUBECONFIG"
-            echo "${{ secrets.KUBECONFIG }}" > $HOME/.kube/config
+            printf '%s' "${{ secrets.KUBECONFIG }}" > $HOME/.kube/config
           else
             echo "Detected base64 KUBECONFIG"
-            echo "${{ secrets.KUBECONFIG }}" | base64 -d > $HOME/.kube/config
+            printf '%s' "${{ secrets.KUBECONFIG }}" | base64 -d > $HOME/.kube/config
           fi
           chmod 600 $HOME/.kube/config
+          
+          # Diagnostics
+          echo "Kubeconfig size: $(wc -c < $HOME/.kube/config) bytes"
+          if ! grep -q "current-context" $HOME/.kube/config; then
+            echo "Warning: current-context missing, attempting to fix..."
+            FIRST_CONTEXT=$(kubectl config get-contexts -o name | head -n 1)
+            if [ -n "$FIRST_CONTEXT" ]; then
+              kubectl config use-context "$FIRST_CONTEXT"
+            fi
+          fi
+          
           kubectl config view --minify # Verification of context
           kubectl apply -k infra/k8s/overlays/dev
         env: