diff --git a/k8s/argocd/apps/50-messaging.yaml b/k8s/argocd/apps/50-messaging.yaml
index e5d82c7..e1d01e0 100644
--- a/k8s/argocd/apps/50-messaging.yaml
+++ b/k8s/argocd/apps/50-messaging.yaml
@@ -39,6 +39,17 @@ spec:
     repoURL: https://charts.bitnami.com/bitnami
     chart: redis
     targetRevision: 20.6.0
+    helm:
+      # docker.io/bitnami stopped publishing version-pinned tags; bitnamilegacy
+      # mirrors them. allowInsecureImages silences the chart image-allowlist check.
+      values: |
+        global:
+          security:
+            allowInsecureImages: true
+        image:
+          repository: bitnamilegacy/redis
+        auth:
+          enabled: false
   destination:
     server: https://kubernetes.default.svc
     namespace: sqs