diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml
index 64032835..2bb50835 100644
--- a/services/veles/backend-deployment.yaml
+++ b/services/veles/backend-deployment.yaml
@@ -33,7 +33,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: migrate-db
-          image: registry.bstein.dev/veles/veles-backend:0.1.3 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.1.3@sha256:a39cf70848bf013d8c78c1ff3c38795f056e7608f947c905fca62db46a3a1c6e # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: IfNotPresent
           command: ["veles-db"]
           args: ["--init", "--json"]
@@ -58,11 +58,11 @@ spec:
               drop: ["ALL"]
       containers:
         - name: backend
-          image: registry.bstein.dev/veles/veles-backend:0.1.3 # {"$imagepolicy": "veles:veles-backend"}
+          image: registry.bstein.dev/veles/veles-backend:0.1.3@sha256:a39cf70848bf013d8c78c1ff3c38795f056e7608f947c905fca62db46a3a1c6e # {"$imagepolicy": "veles:veles-backend"}
           imagePullPolicy: IfNotPresent
           env:
             - name: VELES_SIM_IMAGE
-              value: registry.bstein.dev/veles/veles-sim-worker:0.1.3 # {"$imagepolicy": "veles:veles-sim-worker"}
+              value: registry.bstein.dev/veles/veles-sim-worker:0.1.3@sha256:ae8a3500770823a062baff51959033de1b51a356873b81a54f5426f021ae86e1 # {"$imagepolicy": "veles:veles-sim-worker"}
           ports:
             - name: http
               containerPort: 8796
diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml
index 23d1f535..3056c1d8 100644
--- a/services/veles/configmap.yaml
+++ b/services/veles/configmap.yaml
@@ -32,7 +32,7 @@ data:
   VELES_RETENTION_DAYS: "30"
   VELES_SIM_NAMESPACE: veles
   VELES_NAMESPACE: veles
-  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.1.3 # {"$imagepolicy": "veles:veles-sim-worker"}
+  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.1.3@sha256:ae8a3500770823a062baff51959033de1b51a356873b81a54f5426f021ae86e1 # {"$imagepolicy": "veles:veles-sim-worker"}
   VELES_SIM_SERVICE_ACCOUNT: veles-sim
   VELES_SIM_PRIORITY_CLASS: veles-sim
   VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64
diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml
index ae745018..a50814c4 100644
--- a/services/veles/frontend-deployment.yaml
+++ b/services/veles/frontend-deployment.yaml
@@ -48,7 +48,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: frontend
-          image: registry.bstein.dev/veles/veles-frontend:0.1.3 # {"$imagepolicy": "veles:veles-frontend"}
+          image: registry.bstein.dev/veles/veles-frontend:0.1.3@sha256:ba94f7e852955a774a974605305e1f694f767f12ff9fee468f2751501d92a6d1 # {"$imagepolicy": "veles:veles-frontend"}
           imagePullPolicy: IfNotPresent
           ports:
             - name: http