diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index c638f9479..a584a484a 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -322,12 +322,25 @@ jobs:
           chartpress ${{ matrix.chartpress_args || '--skip-build' }}
 
       - name: "Stage 4: Deploy to ${{ matrix.federation_member }}"
+        if: matrix.federation_member != 'curvenote'
         run: |
           . cert-manager.env
           python ./deploy.py ${{ matrix.federation_member }} ${{ matrix.cluster_name || matrix.federation_member }} --name ${{ matrix.release_name || matrix.federation_member }}
         env:
           TERM: xterm
 
+      - name: "Stage 4: Deploy to ${{ matrix.federation_member }}"
+        # TODO: fix ban.py to work on AWS/curvenote
+        if: matrix.federation_member == 'curvenote'
+        run: |
+          . cert-manager.env
+          for stage in auth kubesystem certmanager mybinder; do
+            echo $stage
+            python ./deploy.py ${{ matrix.federation_member }} ${{ matrix.cluster_name || matrix.federation_member }} --name ${{ matrix.release_name || matrix.federation_member }} --stage $stage
+          done
+        env:
+          TERM: xterm
+
       - name: "Stage 4: Verify ${{ matrix.federation_member }} works"
         uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4
         with:
diff --git a/deploy.py b/deploy.py
index 1c2e0c0b6..e76380740 100755
--- a/deploy.py
+++ b/deploy.py
@@ -398,7 +398,7 @@ def main():
         action="store_true",
         help="Print commands, but don't run them",
     )
-    stages = ["all", "auth", "networkbans", "kubesystem", "certmanager", "mybinder"]
+    stages = ["all", "auth", "networkban", "kubesystem", "certmanager", "mybinder"]
     argparser.add_argument(
         "--stage",
         choices=stages,