diff --git a/test/extended/csrapprover/csrapprover.go b/test/extended/csrapprover/csrapprover.go
index 3860311e5c13..8c273db07ee7 100644
--- a/test/extended/csrapprover/csrapprover.go
+++ b/test/extended/csrapprover/csrapprover.go
@@ -42,9 +42,9 @@ var _ = g.Describe("node client cert requests armoring:", func() {
 		}
 
 		// the /config/master API port+endpoint is only visible from inside the cluster
-		// (-> we need to create a pod to try to reach it)  and contains the token
+		// (-> we need to create a pod to try to reach it) and contains the token
 		// of the node-bootstrapper SA, so no random pods should be able to see it
-		pod, err := exutil.NewPodExecutor(oc, "get-bootstrap-creds", "registry.fedoraproject.org/fedora:30")
+		pod, err := exutil.NewPodExecutor(oc, "get-bootstrap-creds", "quay.io/fedora/fedora:32-x86_64")
 		o.Expect(err).NotTo(o.HaveOccurred())
 
 		// get the API server URL, mutate to internal API (use infra.Status.APIServerURLInternal) once API is bumped