diff --git a/kustomization.yaml b/kustomization.yaml
index 57eb211a..38e2ab1f 100644
--- a/kustomization.yaml
+++ b/kustomization.yaml
@@ -5,3 +5,6 @@ resources:
 - manifests/clusterrole.yaml
 - manifests/clusterrolebinding.yaml
 - manifests/system-upgrade-controller.yaml
+images:
+- name: rancher/system-upgrade-controller
+  newTag: v0.14.0
diff --git a/manifests/system-upgrade-controller.yaml b/manifests/system-upgrade-controller.yaml
index a68ce053..bace8e18 100644
--- a/manifests/system-upgrade-controller.yaml
+++ b/manifests/system-upgrade-controller.yaml
@@ -66,7 +66,7 @@ spec:
           effect: "NoExecute"
       containers:
         - name: system-upgrade-controller
-          image: rancher/system-upgrade-controller:latest
+          image: rancher/system-upgrade-controller:v0.14.0
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true