diff --git a/.circleci/config.yml b/.circleci/config.yml
index 3cc20d24..41cae9dd 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,7 +1,7 @@
 version: 2.1
 
 orbs:
-  architect: giantswarm/architect@4.35.6
+  architect: giantswarm/architect@4.37.0
 
 workflows:
   build:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1e15155a..7c71198a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Configure `gsoci.azurecr.io` as the default container image registry.
+
 ### Fixed
 
 - Remove unnecessary finalizers from configmap and AWSCluster. 
@@ -77,7 +81,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- Add necessary values for PSS policy warnings. 
+- Add necessary values for PSS policy warnings.
 
 ## [0.8.0] - 2023-05-08
 
@@ -154,7 +158,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add VerticalPodAutoscaler CR.
 - Add IAM role creation for bastion node.
 
-
 ## [0.3.2] - 2022-03-03
 
 - Added to `aws-app-collection`.
diff --git a/helm/capa-iam-operator/values.yaml b/helm/capa-iam-operator/values.yaml
index 4794c696..b46ece08 100644
--- a/helm/capa-iam-operator/values.yaml
+++ b/helm/capa-iam-operator/values.yaml
@@ -13,7 +13,7 @@ image:
   name: "giantswarm/capa-iam-operator"
   tag: "[[ .Version ]]"
 registry:
-  domain: docker.io
+  domain: gsoci.azurecr.io
 
 pod:
   user:
@@ -37,7 +37,7 @@ securityContext:
     type: RuntimeDefault
   capabilities:
     drop:
-    - ALL
+      - ALL
 
 global:
   podSecurityStandards: