diff --git a/config/install.yaml b/config/install.yaml
index 84a4259674..6f6d1cefb8 100644
--- a/config/install.yaml
+++ b/config/install.yaml
@@ -10986,7 +10986,7 @@ spec:
         - name: TUF_ROOT
           value: /.sigstore
         image: ghcr.io/kyverno/kyverno:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         livenessProbe:
           failureThreshold: 2
           httpGet:
@@ -11041,7 +11041,7 @@ spec:
             fieldRef:
               fieldPath: metadata.namespace
         image: ghcr.io/kyverno/kyvernopre:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         name: kyverno-pre
         resources:
           limits:
diff --git a/config/manifest/deployment.yaml b/config/manifest/deployment.yaml
index 03a74d2b99..519b7c6e7b 100755
--- a/config/manifest/deployment.yaml
+++ b/config/manifest/deployment.yaml
@@ -42,7 +42,7 @@ spec:
       initContainers:
         - name: kyverno-pre
           image: ghcr.io/kyverno/kyvernopre:latest
-          imagePullPolicy: IfNotPresent
+          imagePullPolicy: Always
           resources:
             limits:
               cpu: 100m
@@ -68,7 +68,7 @@ spec:
       containers:
         - name: kyverno
           image: ghcr.io/kyverno/kyverno:latest
-          imagePullPolicy: IfNotPresent
+          imagePullPolicy: Always
           args:
           - "--filterK8sResources=[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][*,kyverno,kyverno*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*][PolicyReport,*,*][ClusterPolicyReport,*,*]"
           # customize webhook timeout