diff --git a/deploy/k8s/eventrt-certs-secret.sh b/deploy/k8s/eventrt-certs-secret.sh
new file mode 100755
index 0000000..218d404
--- /dev/null
+++ b/deploy/k8s/eventrt-certs-secret.sh
@@ -0,0 +1,14 @@
+#!/bin/sh
+# Create the eventrt client certificate secret.
+# Run this script from the directory that contains the three cert files,
+# or adjust the paths below to point at the actual files.
+#
+# Expected files (generated during RabbitMQ TLS setup):
+#   ca_certificate.pem
+#   eventrt_client_cert.pem
+#   eventrt_client_key.pem
+
+kubectl create secret generic eventrt-certs \
+  --from-file=ca_certificate.pem=./ca_certificate.pem \
+  --from-file=eventrt_client_cert.pem=./eventrt_client_cert.pem \
+  --from-file=eventrt_client_key.pem=./eventrt_client_key.pem
diff --git a/deploy/k8s/eventrt-configmap.yaml b/deploy/k8s/eventrt-configmap.yaml
index a027848..c9a1589 100644
--- a/deploy/k8s/eventrt-configmap.yaml
+++ b/deploy/k8s/eventrt-configmap.yaml
@@ -17,9 +17,9 @@ data:
       port: 5671
 
     mongodb:
-      host: "192.168.1.101"
+      host: "mongodb-service"
       port: 27017
-      user: "coslight"
+      user: "admin"
       password: ""          # injected via env MONGODB_PASSWORD
       database: "eventdb"
       auth_db: "admin"
@@ -38,8 +38,8 @@ data:
       service_addr: ":8081"
       service_name: "eventRT"
       secret_key: ""        # injected via env SERVICE_SECRET_KEY
-      deploy_env: "production"
+      deploy_env: "development"
 
     otel:
-      endpoint: "jaeger:4318"
+      endpoint: "jaeger-service:4318"
       insecure: true
diff --git a/deploy/k8s/eventrt-deployment.yaml b/deploy/k8s/eventrt-deployment.yaml
index b8e6091..ebfa3e2 100644
--- a/deploy/k8s/eventrt-deployment.yaml
+++ b/deploy/k8s/eventrt-deployment.yaml
@@ -16,8 +16,9 @@ spec:
     spec:
       containers:
         - name: eventrt
-          image: coslight/eventrt:latest
+          image: eventrt:v1
           imagePullPolicy: IfNotPresent
+          command: ["/app/eventrt"]
           args:
             - "-eventRT_config_dir=/app/configs"
             - "-eventRT_config_name=config"
diff --git a/deploy/k8s/eventrt-secret.yaml b/deploy/k8s/eventrt-secret.yaml
index b96df37..9d176c5 100644
--- a/deploy/k8s/eventrt-secret.yaml
+++ b/deploy/k8s/eventrt-secret.yaml
@@ -4,5 +4,5 @@ metadata:
   name: eventrt-secret
 type: Opaque
 stringData:
-  mongodb-password: "coslight@tj"
+  mongodb-password: "coslight"
   secret-key: "eventrt_key"