Consider having Renovate handle this for you - using a git repo to apply your manifests will make it pull updated container images