diff --git a/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml b/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
index 65226a0f..552c16de 100644
--- a/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
+++ b/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
@@ -7,7 +7,7 @@ spec:
   template:
     spec:
       initContainers:
-        - image: bitnami/kubectl
+        - image: ghcr.io/fluxcd/flux-cli:v0.17.2
           securityContext:
             privileged: false
             readOnlyRootFilesystem: true
diff --git a/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml b/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
index 8d2164b1..e9d07a71 100644
--- a/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
+++ b/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
@@ -9,7 +9,7 @@ spec:
       template:
         spec:
           initContainers:
-          - image: bitnami/kubectl
+          - image: ghcr.io/fluxcd/flux-cli:v0.17.2
             name: copy-kubectl
             # it's okay to do this because kubectl is a statically linked binary
             command:
diff --git a/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml b/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
index b054d7ce..501e940e 100644
--- a/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
+++ b/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
@@ -7,7 +7,7 @@ spec:
   template:
     spec:
       initContainers:
-      - image: bitnami/kubectl
+      - image: ghcr.io/fluxcd/flux-cli:v0.17.2
         name: copy-kubectl
         # it's okay to do this because kubectl is a statically linked binary
         command:
diff --git a/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml b/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
index b4d83e22..ad4e6404 100644
--- a/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
+++ b/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
@@ -9,7 +9,7 @@ spec:
       template:
         spec:
           initContainers:
-          - image: bitnami/kubectl
+          - image: ghcr.io/fluxcd/flux-cli:v0.17.2
             name: copy-kubectl
             # it's okay to do this because kubectl is a statically linked binary
             command: