diff --git a/kubernetes/apps/kube-system/democratic-csi/local-path/helmrelease.yaml b/kubernetes/apps/kube-system/democratic-csi/local-path/helmrelease.yaml
index 37a779f77..ee108f286 100644
--- a/kubernetes/apps/kube-system/democratic-csi/local-path/helmrelease.yaml
+++ b/kubernetes/apps/kube-system/democratic-csi/local-path/helmrelease.yaml
@@ -39,7 +39,7 @@ spec:
         enabled: false
       externalProvisioner:
         enabled: true
-        image: registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
+        image: registry.k8s.io/sig-storage/csi-provisioner:v4.0.1@sha256:bf5a235b67d8aea00f5b8ec24d384a2480e1017d5458d8a63b361e9eeb1608a9
         extraArgs:
           - --leader-election=false
           - --node-deployment=true