diff --git a/k8s/registry-sync-cronjob.yaml b/k8s/registry-sync-cronjob.yaml
index d61142da..f317e823 100644
--- a/k8s/registry-sync-cronjob.yaml
+++ b/k8s/registry-sync-cronjob.yaml
@@ -24,10 +24,12 @@ spec:
                   set -e
                   echo "=== Registry Sync: $(date) ==="
 
-                  REGISTRY="10.100.9.70:5000"
+                  REGISTRY="registry.spdy.io"
 
-                  # Base images to cache
+                  # Base images to cache (source of truth for all K8s deployments)
+                  # Add new images here - all deployments should use registry.spdy.io/library/*
                   IMAGES="
+                    library/busybox:latest
                     library/node:20-slim
                     library/node:22-slim
                     library/node:22
@@ -40,7 +42,7 @@ spec:
 
                   for img in $IMAGES; do
                     echo "Syncing docker.io/$img -> $REGISTRY/$img"
-                    crane copy "docker.io/$img" "$REGISTRY/$img" --insecure || echo "WARN: Failed $img"
+                    crane copy "docker.io/$img" "$REGISTRY/$img" || echo "WARN: Failed $img"
                   done
 
                   echo "=== Sync complete ==="