diff --git a/clusters/k8s01/system-upgrades/dns.yaml b/clusters/k8s01/system-upgrades/dns.yaml
index cacbbef07a03b58c3169cfe5b7452a8ae6e8476a..4f25a0bcf9324cb0325d8ae5018cb1f3922b5f78 100644
--- a/clusters/k8s01/system-upgrades/dns.yaml
+++ b/clusters/k8s01/system-upgrades/dns.yaml
@@ -84,7 +84,7 @@ spec:
         force: false
     version: 1.0.0
     upgrade:
-        image: quay.io/fedora/fedora:38
+        image: quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
         command:
             - chroot
             - /host
diff --git a/clusters/k8s01/system-upgrades/iscsid_hotfix.yaml b/clusters/k8s01/system-upgrades/iscsid_hotfix.yaml
index 1723e50a29f35af11d0311072595b8332a128295..f8795328cbf8f56c27e097ae90b6bbd9fcac96a3 100644
--- a/clusters/k8s01/system-upgrades/iscsid_hotfix.yaml
+++ b/clusters/k8s01/system-upgrades/iscsid_hotfix.yaml
@@ -57,7 +57,7 @@ spec:
       path: /host/run/system-upgrade/secrets/fedora
   version: 1.0.0
   upgrade:
-    image: quay.io/fedora/fedora:38
+    image: quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
     command: ["chroot", "/host"]
     args: ["sh", "/run/system-upgrade/secrets/fedora/install.sh"]
 
diff --git a/clusters/k8s01/system-upgrades/registry.yaml b/clusters/k8s01/system-upgrades/registry.yaml
index e30bae257f9e5573819828cfe49f55834aa53a76..92f2b3ad92efa859dffd0ef663f110390f6ab4ac 100644
--- a/clusters/k8s01/system-upgrades/registry.yaml
+++ b/clusters/k8s01/system-upgrades/registry.yaml
@@ -79,7 +79,7 @@ spec:
           path: /host/run/system-upgrade/secrets/crio-registry-config
     version: 1.0.5
     upgrade:
-        image: quay.io/fedora/fedora:38
+        image: quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf
         command:
             - chroot
             - /host