diff --git a/README.md b/README.md
index 568bde1aacc2569bd357d2f699c3918a815c0e86..e7a6f0e24e0d754c5c9918fb5abed61378ebd206 100644
--- a/README.md
+++ b/README.md
@@ -218,7 +218,7 @@ The Google Cloud template uses some global configuration used throughout all job
| Name | description | default value |
| ------------------------ | -------------------------------------- | ----------------- |
-| `GCP_CLI_IMAGE` | the Docker image used to run Google Cloud CLI commands| `google/cloud-sdk:latest` |
+| `GCP_CLI_IMAGE` | the Docker image used to run Google Cloud CLI commands| `gcr.io/google.com/cloudsdktool/cloud-sdk:latest` |
| :lock: `GCP_KEY_FILE` | Default [Service Account key file](https://cloud.google.com/bigquery/docs/authentication/service-account-file) | _none_ |
| `GCP_OIDC_PROVIDER` | Default Workload Identity Provider associated with GitLab to [authenticate with OpenID Connect](https://docs.gitlab.com/ee/ci/cloud_services/google_cloud/) | none|
| `GCP_OIDC_ACCOUNT` | Default Service Account to which impersonate with OpenID Connect authentication | none |
diff --git a/kicker.json b/kicker.json
index 210f664252da8886cccdbdae7852f1889fef72b3..10ad824c352e8accde3151b52010c85e3bea09a7 100644
--- a/kicker.json
+++ b/kicker.json
@@ -7,7 +7,7 @@
{
"name": "GCP_CLI_IMAGE",
"description": "The Docker image used to run Google Cloud CLI commands",
- "default": "google/cloud-sdk:latest"
+ "default": "gcr.io/google.com/cloudsdktool/cloud-sdk:latest"
},
{
"name": "GCP_KEY_FILE",
diff --git a/templates/gitlab-ci-gcloud.yml b/templates/gitlab-ci-gcloud.yml
index 85b2b42da9074b905f5f4de51b1da618da180dce..b009c7de2efeda2e846249cb003244301ba6dd4a 100644
--- a/templates/gitlab-ci-gcloud.yml
+++ b/templates/gitlab-ci-gcloud.yml
@@ -26,7 +26,7 @@ variables:
TBC_TRACKING_IMAGE: "$CI_REGISTRY/to-be-continuous/tools/tracking:master"
# Default Docker image (can be overridden)
- GCP_CLI_IMAGE: "google/cloud-sdk:latest"
+ GCP_CLI_IMAGE: "gcr.io/google.com/cloudsdktool/cloud-sdk:latest"
GCP_SCRIPTS_DIR: "."