diff --git a/deploy/helm/pargar/values-apollo.yaml b/deploy/helm/pargar/values-apollo.yaml
index a2c0132..7b75aeb 100644
--- a/deploy/helm/pargar/values-apollo.yaml
+++ b/deploy/helm/pargar/values-apollo.yaml
@@ -58,7 +58,10 @@ global:
   # Images published by .gitea/workflows/build-and-push.yaml on tag push.
   imageRegistry: src.panahifar.ir/ahp
   publicUrl: https://pargar.panahifar.ir
-imagePullSecrets: []
+# Gitea packages are private: kubelet pulls need secret `gitea-pull`
+# (docker-registry secret for src.panahifar.ir, created in ns pargar).
+imagePullSecrets:
+  - gitea-pull
 ingress:
   enabled: true
   tls: