diff --git a/deploy.sh b/deploy.sh
index 1bdd903..474053a 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -54,13 +54,13 @@ if [ -n "${REGISTRY_USER:-}" ] && [ -n "${REGISTRY_PASS:-}" ]; then
   REGISTRY_AUTH="$(printf '%s:%s' "$REGISTRY_USER" "$REGISTRY_PASS" | base64 -w 0)"
   export REGISTRY_USER REGISTRY_PASS REGISTRY_AUTH
   echo "==> Updating registry pull secret ..."
-  envsubst \u003c "./k8s/registry-secret.yaml" | kubectl apply -f -
+  envsubst < "./k8s/registry-secret.yaml" | kubectl apply -f -
 fi
 
 # Update image tag in manifest and apply
 export TAG
 export NAMESPACE
-envsubst \u003c "./k8s/app.yaml" | kubectl apply -f -
+envsubst < "./k8s/app.yaml" | kubectl apply -f -
 
 # Wait for rollout
 echo "==> Waiting for rollout ..."