diff --git a/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml b/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
index 65226a0f79f79b2e76c00e006096381c8cdcc896..552c16dea4c275b5c4c5f5baa9fe9e45ef0e104b 100644
--- a/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
+++ b/manifests/integrations/eventhub-credentials-sync/_base/kubectl-patch.yaml
@@ -7,7 +7,7 @@ spec:
   template:
     spec:
       initContainers:
-        - image: bitnami/kubectl
+        - image: ghcr.io/fluxcd/flux-cli:v0.17.2
           securityContext:
             privileged: false
             readOnlyRootFilesystem: true
diff --git a/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml b/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
index 8d2164b1664af315598576e6b2047d8e8a4f8007..e9d07a71c1d8e99aae98c1559f300eb8c79a1c51 100644
--- a/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
+++ b/manifests/integrations/eventhub-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
@@ -9,7 +9,7 @@ spec:
       template:
         spec:
           initContainers:
-          - image: bitnami/kubectl
+          - image: ghcr.io/fluxcd/flux-cli:v0.17.2
             name: copy-kubectl
             # it's okay to do this because kubectl is a statically linked binary
             command:
diff --git a/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml b/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
index b054d7ce5badf689ae6cd1c87f36077c3e981e3a..501e940e44a4698bb91c4f2867f8ad95e9bf2194 100644
--- a/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
+++ b/manifests/integrations/registry-credentials-sync/_base/kubectl-patch.yaml
@@ -7,7 +7,7 @@ spec:
   template:
     spec:
       initContainers:
-      - image: bitnami/kubectl
+      - image: ghcr.io/fluxcd/flux-cli:v0.17.2
         name: copy-kubectl
         # it's okay to do this because kubectl is a statically linked binary
         command:
diff --git a/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml b/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
index b4d83e225dea5a10109fa363905769dfd4589033..ad4e64041ce8c1e097c501ddee18b192df8dc437 100644
--- a/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
+++ b/manifests/integrations/registry-credentials-sync/_cronjobs/_base/kubectl-patch.yaml
@@ -9,7 +9,7 @@ spec:
       template:
         spec:
           initContainers:
-          - image: bitnami/kubectl
+          - image: ghcr.io/fluxcd/flux-cli:v0.17.2
             name: copy-kubectl
             # it's okay to do this because kubectl is a statically linked binary
             command: