diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b1c1ce62bf..6caae6117a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,6 +16,14 @@ updates:
   - 'area/dependency'
   - 'release-note-none'
   - 'ok-to-test'
+- package-ecosystem: docker
+  directory: /deploy/packages/default
+  schedule:
+    interval: weekly
+  labels:
+  - 'area/dependency'
+  - 'release-note-none'
+  - 'ok-to-test'
 - package-ecosystem: gomod
   directory: /providers
   schedule:
diff --git a/deploy/packages/default/manifest.yaml b/deploy/packages/default/manifest.yaml
index 31ec41a98a..b94aac011a 100644
--- a/deploy/packages/default/manifest.yaml
+++ b/deploy/packages/default/manifest.yaml
@@ -43,7 +43,7 @@ spec:
       serviceAccountName: cloud-controller-manager
       containers:
       - name: cloud-controller-manager
-        image: k8scloudprovidergcp/cloud-controller-manager:latest
+        image: registry.k8s.io/cloud-provider-gcp/cloud-controller-manager:v32.2.5
         imagePullPolicy: IfNotPresent
         # ko puts it somewhere else... command: ['/usr/local/bin/cloud-controller-manager']
         args: [] # args must be replaced by tooling
diff --git a/e2e/scenarios/kops-simple b/e2e/scenarios/kops-simple
index e41750c8f2..0d81908696 100755
--- a/e2e/scenarios/kops-simple
+++ b/e2e/scenarios/kops-simple
@@ -161,7 +161,7 @@ create_args="${create_args} --gce-service-account=default"
 
 # Add our manifest
 cp "${REPO_ROOT}/deploy/packages/default/manifest.yaml" "${WORKDIR}/cloud-provider-gcp.yaml"
-sed -i -e "s@k8scloudprovidergcp/cloud-controller-manager:latest@${IMAGE_REPO}/cloud-controller-manager:${IMAGE_TAG}@g" "${WORKDIR}/cloud-provider-gcp.yaml"
+sed -i -e "s@registry.k8s.io/cloud-provider-gcp/cloud-controller-manager:v[0-9]\+\(\.[0-9]\+\)*@${IMAGE_REPO}/cloud-controller-manager:${IMAGE_TAG}@g" "${WORKDIR}/cloud-provider-gcp.yaml"
 create_args="${create_args} --add=${WORKDIR}/cloud-provider-gcp.yaml"
 
 # Enable cluster addons, this enables us to replace the built-in manifest