diff --git a/cluster/kube/lib/registry.libsonnet b/cluster/kube/lib/registry.libsonnet
index 2110cd1b..2ed32b99 100644
--- a/cluster/kube/lib/registry.libsonnet
+++ b/cluster/kube/lib/registry.libsonnet
@@ -215,7 +215,7 @@ local kube = import "../../../kube/hscloud.libsonnet";
                         },
                         containers_: {
                             registry: kube.Container("docker-registry") {
-                                image: "registry:2.7.1",
+                                image: "registry:2.8.3",
                                 args: ["/config/config.yml"],
                                 ports_: {
                                     registry: { containerPort: 5000 },
@@ -229,6 +229,7 @@ local kube = import "../../../kube/hscloud.libsonnet";
                                     local cephSecretName = "rook-ceph-object-user-%s-registry" % [cfg.objectStorageName],
                                     REGISTRY_STORAGE_S3_ACCESSKEY: { secretKeyRef: { name: cephSecretName, key: "AccessKey" } },
                                     REGISTRY_STORAGE_S3_SECRETKEY: { secretKeyRef: { name: cephSecretName, key: "SecretKey" } },
+                                    REGISTRY_AUTH_PORT: '', // lmao https://github.com/distribution/distribution/issues/3653
                                 },
                             },
                         },