diff --git a/.github/workflows/cd-workflow.yaml b/.github/workflows/cd-workflow.yaml
index 3965d81..0a21327 100644
--- a/.github/workflows/cd-workflow.yaml
+++ b/.github/workflows/cd-workflow.yaml
@@ -108,7 +108,21 @@ jobs:
           service: ${{ secrets.GCP_CLOUD_RUN_SERVICE }}
           image: ${{ secrets.GCP_GAR_REPO }}/backstage-image:${{ github.sha }}
           region: ${{ secrets.GCP_REGION }}
-          flags: >
-            --allow-unauthenticated
+          flags: '--port=7007 --add-cloudsql-instances=code-idp:europe-west10:backstage-pg'
           env_vars: |
+            POSTGRES_HOST=/cloudsql/code-idp:europe-west10:backstage-pg
+            POSTGRES_PORT=5432
+            POSTGRES_USER=postgres
+            POSTGRES_DB=postgres
             BASE_URL=https://backstage.foundations-software-engineering.com
+          secrets: |
+            POSTGRES_PASSWORD=postgres-password:latest
+            GITHUB_TOKEN=github_token:latest
+            GOOGLE_CLIENT_ID=google_client_id:latest
+            GOOGLE_CLIENT_SECRET=google_client_secret:latest
+            GITHUB_CLIENT_SECRET=github_client_secret:latest
+            PROD_GITHUB_TOKEN=prod_github_token:latest
+            PROD_GITHUB_CLIENT_SECRET=prod_github_client_secret:latest
+            GITLAB_TOKEN=gitlab_token:latest
+            TECHDOCS_GCS_CREDENTIALS=techdocs_gcs_credentials:latest
+