cert-manager · cert-manager-bot · May 7, 2026
diff --git a/config/config.yaml b/config/config.yaml
@@ -12,10 +12,10 @@ plank:
       timeout: 7200000000000 # 2h
       grace_period: 10000000000 # 10s
       utility_images:
-        clonerefs: "us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260414-6691f5aff"
-        initupload: "us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260414-6691f5aff"
-        entrypoint: "us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260414-6691f5aff"
-        sidecar: "us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260414-6691f5aff"
+        clonerefs: "us-docker.pkg.dev/k8s-infra-prow/images/clonerefs:v20260507-caffe02f9"
+        initupload: "us-docker.pkg.dev/k8s-infra-prow/images/initupload:v20260507-caffe02f9"
+        entrypoint: "us-docker.pkg.dev/k8s-infra-prow/images/entrypoint:v20260507-caffe02f9"
+        sidecar: "us-docker.pkg.dev/k8s-infra-prow/images/sidecar:v20260507-caffe02f9"
       gcs_configuration:
         bucket: cert-manager-prow-artifacts
         path_strategy: explicit

diff --git a/config/jobs/testing/testing-periodics-trusted.yaml b/config/jobs/testing/testing-periodics-trusted.yaml
@@ -112,7 +112,7 @@ periodics:
     preset-deployer-ssh-key: "true"
   spec:
     containers:
-    - image: us-docker.pkg.dev/k8s-infra-prow/images/generic-autobumper:v20260414-6691f5aff
+    - image: us-docker.pkg.dev/k8s-infra-prow/images/generic-autobumper:v20260507-caffe02f9
       command:
       - generic-autobumper
       args:
@@ -179,7 +179,7 @@ periodics:
   spec:
     containers:
     - name: branchprotector
-      image: us-docker.pkg.dev/k8s-infra-prow/images/branchprotector:v20260414-6691f5aff
+      image: us-docker.pkg.dev/k8s-infra-prow/images/branchprotector:v20260507-caffe02f9
       command:
       - branchprotector
       args:

diff --git a/config/jobs/testing/testing-presubmits.yaml b/config/jobs/testing/testing-presubmits.yaml
@@ -8,7 +8,7 @@ presubmits:
     decorate: true
     spec:
       containers:
-      - image: us-docker.pkg.dev/k8s-infra-prow/images/checkconfig:v20260414-6691f5aff
+      - image: us-docker.pkg.dev/k8s-infra-prow/images/checkconfig:v20260507-caffe02f9
         command:
         - checkconfig
         args:

diff --git a/prow/cluster/cherrypicker_deployment.yaml b/prow/cluster/cherrypicker_deployment.yaml
@@ -39,7 +39,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: cherrypicker
-        image: us-docker.pkg.dev/k8s-infra-prow/images/cherrypicker:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/cherrypicker:v20260507-caffe02f9
         imagePullPolicy: Always
         args:
         - --github-token-path=/etc/github/token

diff --git a/prow/cluster/crier_deployment.yaml b/prow/cluster/crier_deployment.yaml
@@ -33,7 +33,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: crier
-        image: us-docker.pkg.dev/k8s-infra-prow/images/crier:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/crier:v20260507-caffe02f9
         args:
         - --blob-storage-workers=10
         - --config-path=/etc/config/config.yaml

diff --git a/prow/cluster/deck_deployment.yaml b/prow/cluster/deck_deployment.yaml
@@ -38,7 +38,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
-        image: us-docker.pkg.dev/k8s-infra-prow/images/deck:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/deck:v20260507-caffe02f9
         imagePullPolicy: Always
         ports:
         - name: http

diff --git a/prow/cluster/gencred_deployment.yaml b/prow/cluster/gencred_deployment.yaml
@@ -38,7 +38,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: gencred
-        image: europe-west1-docker.pkg.dev/cert-manager-tests-trusted/cert-manager-infra-images/gencred:20260403-7b8ef83
+        image: europe-west1-docker.pkg.dev/cert-manager-tests-trusted/cert-manager-infra-images/gencred:20260430-8b53b65
         args:
         - --config=/etc/config/gencred-config.yaml
         - --refresh-interval=46h

diff --git a/prow/cluster/ghproxy.yaml b/prow/cluster/ghproxy.yaml
@@ -59,7 +59,7 @@ spec:
     spec:
       containers:
       - name: ghproxy
-        image: us-docker.pkg.dev/k8s-infra-prow/images/ghproxy:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/ghproxy:v20260507-caffe02f9
         args:
         - --cache-dir=/cache
         - --cache-sizeGB=99

diff --git a/prow/cluster/hook_deployment.yaml b/prow/cluster/hook_deployment.yaml
@@ -38,7 +38,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
-        image: us-docker.pkg.dev/k8s-infra-prow/images/hook:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/hook:v20260507-caffe02f9
         imagePullPolicy: Always
         args:
         - --dry-run=false

diff --git a/prow/cluster/horologium_deployment.yaml b/prow/cluster/horologium_deployment.yaml
@@ -35,7 +35,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
-        image: us-docker.pkg.dev/k8s-infra-prow/images/horologium:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/horologium:v20260507-caffe02f9
         args:
         - --config-path=/etc/config/config.yaml
         - --job-config-path=/etc/job-config

diff --git a/prow/cluster/needs-rebase_deployment.yaml b/prow/cluster/needs-rebase_deployment.yaml
@@ -32,7 +32,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: needs-rebase
-        image: us-docker.pkg.dev/k8s-infra-prow/images/needs-rebase:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/needs-rebase:v20260507-caffe02f9
         imagePullPolicy: Always
         args:
         - --dry-run=false

diff --git a/prow/cluster/sinker_deployment.yaml b/prow/cluster/sinker_deployment.yaml
@@ -22,7 +22,7 @@ spec:
         - --config-path=/etc/config/config.yaml
         - --job-config-path=/etc/job-config
         - --dry-run=false
-        image: us-docker.pkg.dev/k8s-infra-prow/images/sinker:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/sinker:v20260507-caffe02f9
         env:
         # Use KUBECONFIG envvar rather than --kubeconfig flag in order to provide multiple configs to merge.
         - name: KUBECONFIG

diff --git a/prow/cluster/statusreconciler_deployment.yaml b/prow/cluster/statusreconciler_deployment.yaml
@@ -33,7 +33,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: statusreconciler
-        image: us-docker.pkg.dev/k8s-infra-prow/images/status-reconciler:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/status-reconciler:v20260507-caffe02f9
         imagePullPolicy: Always
         args:
         - --dry-run=false

diff --git a/prow/cluster/tide_deployment.yaml b/prow/cluster/tide_deployment.yaml
@@ -34,7 +34,7 @@ spec:
       serviceAccountName: tide
       containers:
       - name: tide
-        image: us-docker.pkg.dev/k8s-infra-prow/images/tide:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/tide:v20260507-caffe02f9
         args:
         - --dry-run=false
         - --github-endpoint=http://ghproxy

diff --git a/prow/cluster/tot_deployment.yaml b/prow/cluster/tot_deployment.yaml
@@ -47,7 +47,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: tot
-        image: us-docker.pkg.dev/k8s-infra-prow/images/tot:v20260414-6691f5aff
+        image: us-docker.pkg.dev/k8s-infra-prow/images/tot:v20260507-caffe02f9
         imagePullPolicy: Always
         args:
         - -storage=/store/tot.json