diff --git a/.gitea/workflows/cd.yml b/.gitea/workflows/cd.yml
index d344ee0..1468922 100644
--- a/.gitea/workflows/cd.yml
+++ b/.gitea/workflows/cd.yml
@@ -14,6 +14,17 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      # Imagem default do runner (node:18-bullseye) não traz docker CLI nem kubectl —
+      # instalamos sob demanda. Eventualmente isso vai pra imagem custom do runner.
+      - name: Install docker CLI + kubectl
+        run: |
+          apt-get update -qq
+          apt-get install -y -qq docker.io
+          KVER=$(curl -sL https://dl.k8s.io/release/stable.txt)
+          curl -sL "https://dl.k8s.io/release/${KVER}/bin/linux/amd64/kubectl" -o /usr/local/bin/kubectl
+          chmod +x /usr/local/bin/kubectl
+          docker --version && kubectl version --client=true
+
       - name: Auth GCP
         uses: google-github-actions/auth@v2
         with: