diff --git a/k8s/deployment-grid-rs.yaml b/k8s/deployment-grid-rs.yaml
index 5f262537..871fdc2d 100644
--- a/k8s/deployment-grid-rs.yaml
+++ b/k8s/deployment-grid-rs.yaml
@@ -48,7 +48,7 @@ spec:
           # Image built by a new CI pipeline from rust/prop_grid_rs/.
           # Multi-arch (amd64 + arm64) — reuses the repo's existing
           # buildx wiring.
-          image: git.mcintire.me/graham/prop-grid-rs:main
+          image: git.mcintire.me/graham/prop-grid-rs:main # {"$imagepolicy": "flux-system:prop-grid-rs"}
           imagePullPolicy: IfNotPresent
           env:
             # Elixir secrets bundle carries DATABASE_URL already. Rust
diff --git a/k8s/flux.yaml b/k8s/flux.yaml
index 0401834c..e9c61daa 100644
--- a/k8s/flux.yaml
+++ b/k8s/flux.yaml
@@ -54,6 +54,33 @@ spec:
     extract: $ts
 ---
 apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImageRepository
+metadata:
+  name: prop-grid-rs
+  namespace: flux-system
+spec:
+  image: git.mcintire.me/graham/prop-grid-rs
+  interval: 1m
+  provider: generic
+  secretRef:
+    name: forgejo-registry
+---
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImagePolicy
+metadata:
+  name: prop-grid-rs
+  namespace: flux-system
+spec:
+  imageRepositoryRef:
+    name: prop-grid-rs
+  policy:
+    numerical:
+      order: asc
+  filterTags:
+    pattern: ^main-(?P<ts>[0-9]+)-[a-f0-9]+$
+    extract: $ts
+---
+apiVersion: image.toolkit.fluxcd.io/v1
 kind: ImageUpdateAutomation
 metadata:
   name: prop