diff --git a/helm/designate-certmanager-webhook/templates/deployment.yaml b/helm/designate-certmanager-webhook/templates/deployment.yaml
index 0929a3a6..3f5c1a90 100644
--- a/helm/designate-certmanager-webhook/templates/deployment.yaml
+++ b/helm/designate-certmanager-webhook/templates/deployment.yaml
@@ -26,7 +26,7 @@ spec:
       serviceAccountName: {{ include "designate-certmanager-webhook.fullname" . }}
       initContainers:
         - name: wait-for-tls-secret
-          image: alpine:latest
+          image: "{{ .Values.image.alpine.repository }}:{{ .Values.image.alpine.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           volumeMounts:
           - name: certs
@@ -38,7 +38,7 @@ spec:
             - -c
             - "while [ ! -f /tls/tls.key ]; do sleep 5; done"
         - name: add-apiservice
-          image: bitnami/kubectl:latest
+          image: "{{ .Values.image.kubectl.repository }}:{{ .Values.image.kubectl.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           volumeMounts:
             - name: apiservice-config
diff --git a/helm/designate-certmanager-webhook/values.yaml b/helm/designate-certmanager-webhook/values.yaml
index 13539444..32ca44c6 100644
--- a/helm/designate-certmanager-webhook/values.yaml
+++ b/helm/designate-certmanager-webhook/values.yaml
@@ -8,6 +8,12 @@ image:
   repository: syseleven/designate-certmanager-webhook
   tag: 0.2.12
   pullPolicy: IfNotPresent
+  alpine:
+    repository: alpine
+    tag: latest
+  kubectl:
+    repository: bitnami/kubectl
+    tag: latest
 
 imagePullSecrets: []