diff --git a/cluster/kube/k0.libsonnet b/cluster/kube/k0.libsonnet
index 44f83d0..f393dbe 100644
--- a/cluster/kube/k0.libsonnet
+++ b/cluster/kube/k0.libsonnet
@@ -81,6 +81,7 @@
                 sso: k0.cockroach.waw2.Client("sso"),
                 herpDev: k0.cockroach.waw2.Client("herp-dev"),
                 gitea: k0.cockroach.waw2.Client("gitea"),
+                issues: k0.cockroach.waw2.Client("issues"),
             },
         },
 
@@ -215,6 +216,16 @@
                         displayName: "nextcloud",
                     },
                 },
+                # issues.hackerspace.pl (redmine) attachments bucket
+                issuesWaw3: kube.CephObjectStoreUser("issues") {
+                    metadata+: {
+                        namespace: "ceph-waw3",
+                    },
+                    spec: {
+                        store: "waw-hdd-redundant-3-object",
+                        displayName: "issues",
+                    },
+                },
 
                 # nuke@hackerspace.pl's personal storage.
                 nukePersonalWaw3: kube.CephObjectStoreUser("nuke-personal") {
diff --git a/ops/sso/kube/sso.libsonnet b/ops/sso/kube/sso.libsonnet
index 33d5201..078c396 100644
--- a/ops/sso/kube/sso.libsonnet
+++ b/ops/sso/kube/sso.libsonnet
@@ -8,7 +8,7 @@
 
     cfg:: {
         namespace: "sso",
-        image: "registry.k0.hswaw.net/informatic/sso-v2@sha256:a44055a4f1d2a4e0708838b571f3a3c018f3b97adfea71ae0cf1df98246bf6cf",
+        image: "registry.k0.hswaw.net/informatic/sso-v2@sha256:3b277a8e2b3c3225d7da10aee37774266f9eb2aa536e7a390160f550b3556087",
         domain: error "domain must be set",
         database: {
             host: error "database.host must be set",