diff --git a/.vscode/tasks.json b/.vscode/tasks.json
new file mode 100644
index 0000000..bf1951a
--- /dev/null
+++ b/.vscode/tasks.json
@@ -0,0 +1,14 @@
+{
+    "version": "2.0.0",
+    "tasks": [
+
+    {
+      "label": "Kustomize - Apply Selected",
+      "type": "shell",
+      "command": "kubectl apply -k ${fileDirname}",
+      "problemMatcher": [],
+      "group": "build"
+    },
+
+  ]
+}
\ No newline at end of file
diff --git a/deploy/app/helm-values.yaml b/deploy/app/helm-values.yaml
index 4aff532..194629e 100644
--- a/deploy/app/helm-values.yaml
+++ b/deploy/app/helm-values.yaml
@@ -25,6 +25,7 @@ image:
   #   repository: gitea/gitea
   #
   # This ensures the container includes OpenSSH and can expose the SSH port.
+  tag: 28 # helm chart automatically adds -rootlesss to end of tag 28-rootless
   repository: gitea/gitea
   pullPolicy: IfNotPresent
 valkey-cluster:
diff --git a/deploy/app/kustomization.yaml b/deploy/app/kustomization.yaml
index 6b43d75..0da07ba 100644
--- a/deploy/app/kustomization.yaml
+++ b/deploy/app/kustomization.yaml
@@ -8,6 +8,6 @@ secretGenerator:
   - name: gitea-helm-install-values
     files:
       - values.yaml=helm-values.yaml
-      - values.private.yaml=helm-values.private.yaml
+      - values.private.yaml=helm-values.private.dec.yaml
 generatorOptions:
   disableNameSuffixHash: true