diff --git a/cluster/admitomatic/BUILD.bazel b/cluster/admitomatic/BUILD.bazel
index e2ff90fb..231b09c5 100644
--- a/cluster/admitomatic/BUILD.bazel
+++ b/cluster/admitomatic/BUILD.bazel
@@ -24,6 +24,8 @@ go_library(
 go_binary(
     name = "admitomatic",
     embed = [":admitomatic_lib"],
+    pure = "on",
+    static = "on",
     visibility = ["//visibility:public"],
 )
 
@@ -61,5 +63,5 @@ container_push(
     image = ":runtime",
     registry = "registry.k0.hswaw.net",
     repository = "cluster/admitomatic",
-    tag = "{BUILD_TIMESTAMP}-{STABLE_GIT_COMMIT}",
+    tag = "1698514671-{STABLE_GIT_COMMIT}",
 )
diff --git a/cluster/kube/lib/admitomatic.libsonnet b/cluster/kube/lib/admitomatic.libsonnet
index d4a27667..0432bca7 100644
--- a/cluster/kube/lib/admitomatic.libsonnet
+++ b/cluster/kube/lib/admitomatic.libsonnet
@@ -32,7 +32,7 @@ local prototext = import "../../../kube/prototext.libsonnet";
 
         cfg:: {
             namespace: "admitomatic",
-            image: "registry.k0.hswaw.net/cluster/admitomatic:315532800-418f1b77968ac843af2e48cd414c2f8eb19653ba",
+            image: "registry.k0.hswaw.net/cluster/admitomatic@sha256:f7f0c007b2e12ca564282dd55c9334947854d58ebb5b305cf6e9e0060382d81d",
 
             proto: {},
         },