diff --git a/deploy/kessel-relations-deploy.yaml b/deploy/kessel-relations-deploy.yaml
index 94531ea..f5bd824 100644
--- a/deploy/kessel-relations-deploy.yaml
+++ b/deploy/kessel-relations-deploy.yaml
@@ -24,6 +24,11 @@ objects:
                   secret:
                     secretName: kessel-relations-spicedb
                 containers:
+                - name: migrate
+                  volumeMounts:
+                  - name: rds-tls
+                    mountPath: /etc/tls/rds.pem
+                    subPath: db.ca_cert
                 - name: spicedb
                   volumeMounts:
                   - name: rds-tls