diff --git a/.gitea/workflows/kub-deploy.yml b/.gitea/workflows/kub-deploy.yml
index 6c3a65f..2b2fb69 100644
--- a/.gitea/workflows/kub-deploy.yml
+++ b/.gitea/workflows/kub-deploy.yml
@@ -73,9 +73,9 @@ jobs:
           
           # Apply manifests and restart
           sshpass -e ssh -o StrictHostKeyChecking=no root@${{ env.K8S_SERVER }} "
-            kubectl apply -f /tmp/backoffice-deployment.yaml &&
-            kubectl rollout restart deployment/backoffice &&
-            kubectl rollout status deployment/backoffice --timeout=180s &&
+            kubectl apply -n kbs-stage -f /tmp/backoffice-deployment.yaml &&
+            kubectl -n kbs-stage rollout restart deployment/backoffice &&
+            kubectl -n kbs-stage rollout status deployment/backoffice --timeout=180s &&
             rm -f /tmp/backoffice-deployment.yaml
           "
           echo "✅ Deployed!"
diff --git a/k8s/staging/backoffice-deployment.yaml b/k8s/staging/backoffice-deployment.yaml
index 0b1e8e2..336cd1d 100644
--- a/k8s/staging/backoffice-deployment.yaml
+++ b/k8s/staging/backoffice-deployment.yaml
@@ -4,7 +4,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: backoffice
-  namespace: default
+  namespace: kbs-stage
   labels:
     app: backoffice
 spec:
@@ -20,7 +20,7 @@ spec:
       containers:
       - name: backoffice
         image: 185.252.31.44:30080/admin/backoffice:latest
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 80
           name: http
@@ -43,7 +43,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: backoffice-svc
-  namespace: default
+  namespace: kbs-stage
 spec:
   selector:
     app: backoffice
@@ -58,7 +58,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: backoffice-ingress
-  namespace: default
+  namespace: kbs-stage
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"