diff --git a/base/backup-init-job.yaml b/base/backup-init-job.yaml
index 71a4c75..5f1a8ec 100644
--- a/base/backup-init-job.yaml
+++ b/base/backup-init-job.yaml
@@ -10,7 +10,6 @@ spec:
       initContainers:
       - name: init-certs
         image: cockroach-cfssl-certs
-        imagePullPolicy: Always
         command: ["cockroach-certs"]
         env:
         - name: CERTIFICATE_TYPE
diff --git a/base/init-job.yaml b/base/init-job.yaml
index 06bf64b..07d91bd 100644
--- a/base/init-job.yaml
+++ b/base/init-job.yaml
@@ -11,7 +11,6 @@ spec:
       initContainers:
       - name: init-certs
         image: cockroach-cfssl-certs
-        imagePullPolicy: Always
         command: ["cockroach-certs"]
         env:
         - name: CERTIFICATE_TYPE
diff --git a/base/kustomization.yaml b/base/kustomization.yaml
index 7bce77c..5189ac5 100644
--- a/base/kustomization.yaml
+++ b/base/kustomization.yaml
@@ -7,7 +7,7 @@ images:
     newTag: v23.2.2
   - name: cockroach-cfssl-certs
     newName: quay.io/utilitywarehouse/cockroach-cfssl-certs
-    newTag: latest
+    newTag: v1.0.0
 
 resources:
   - client.yaml
diff --git a/base/statefulset.yaml b/base/statefulset.yaml
index fe652f7..33bf66d 100644
--- a/base/statefulset.yaml
+++ b/base/statefulset.yaml
@@ -41,7 +41,6 @@ spec:
       initContainers:
         - name: init-certs
           image: cockroach-cfssl-certs
-          imagePullPolicy: Always
           command:
             - "sh"
             - "-c"
@@ -148,7 +147,6 @@ spec:
               memory: "1Gi"
         - name: certs-refresh
           image: cockroach-cfssl-certs
-          imagePullPolicy: Always
           command:
             - "sh"
             - "-c"