diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 11e1e0990a..a32c9604ed 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -24,17 +24,23 @@ default:
 .images:
   python:
     name: acidrain/python-poetry:3.11-1.5.1
+    pull_policy: if-not-present
   node:
     name: registry.gitlab.com/wildland/devops/container-builder/octant/node-extended:latest
+    pull_policy: if-not-present
   kaniko:
     name: gcr.io/kaniko-project/executor:$KANIKO_VERSION-debug
+    pull_policy: if-not-present
     entrypoint: [""]
   git_improved:
     name: mikecode/git-gettext:ubuntu
+    pull_policy: if-not-present
   synpress:
     name: registry.gitlab.com/wildland/devops/container-builder/octant/synpress-arch:179ba913
+    pull_policy: if-not-present
   alpine_git:
     name: alpine/git
+    pull_policy: if-not-present
     entrypoint: [""]
 
 .rules:
diff --git a/ci/Dockerfile.backend b/ci/Dockerfile.backend
index 9951b2cdd3..cc1916ad88 100644
--- a/ci/Dockerfile.backend
+++ b/ci/Dockerfile.backend
@@ -1,4 +1,4 @@
-FROM acidrain/python-poetry:3.11-slim-1.5.1
+FROM local-docker-registry.wildland.dev/acidrain/python-poetry:3.11-slim-1.5.1
 
 WORKDIR /app
 
diff --git a/ci/Dockerfile.client b/ci/Dockerfile.client
index 484b2a954d..6e9129cb26 100644
--- a/ci/Dockerfile.client
+++ b/ci/Dockerfile.client
@@ -1,4 +1,4 @@
-FROM node:16-alpine
+FROM local-docker-registry.wildland.dev/library/node:16-alpine
 WORKDIR /app
 COPY package.json yarn.lock ./
 RUN yarn install --ignore-scripts --frozen-lockfile && yarn cache clean
diff --git a/ci/Dockerfile.coin-prices-server b/ci/Dockerfile.coin-prices-server
index 46da6a2a86..782ac58a1d 100644
--- a/ci/Dockerfile.coin-prices-server
+++ b/ci/Dockerfile.coin-prices-server
@@ -1,4 +1,4 @@
-FROM node:16-alpine AS root
+FROM local-docker-registry.wildland.dev/library/node:16-alpine AS root
 WORKDIR /app
 COPY package.json yarn.lock ./
 
diff --git a/ci/Dockerfile.contracts b/ci/Dockerfile.contracts
index 823a604a9d..e1626b94b4 100644
--- a/ci/Dockerfile.contracts
+++ b/ci/Dockerfile.contracts
@@ -1,4 +1,4 @@
-FROM node:16-alpine AS root
+FROM local-docker-registry.wildland.dev/library/node:16-alpine AS root
 WORKDIR /app
 
 FROM root AS build
diff --git a/ci/Dockerfile.contracts-v1 b/ci/Dockerfile.contracts-v1
index 823a604a9d..e1626b94b4 100644
--- a/ci/Dockerfile.contracts-v1
+++ b/ci/Dockerfile.contracts-v1
@@ -1,4 +1,4 @@
-FROM node:16-alpine AS root
+FROM local-docker-registry.wildland.dev/library/node:16-alpine AS root
 WORKDIR /app
 
 FROM root AS build
diff --git a/ci/Dockerfile.subgraph b/ci/Dockerfile.subgraph
index 064fe454cc..032b1b0354 100644
--- a/ci/Dockerfile.subgraph
+++ b/ci/Dockerfile.subgraph
@@ -1,4 +1,4 @@
-FROM node:16-alpine AS root
+FROM local-docker-registry.wildland.dev/library/node:16-alpine AS root
 WORKDIR /app
 
 FROM root AS build
diff --git a/temporary-ingress.yaml b/temporary-ingress.yaml
index 9040e66562..e69de29bb2 100644
--- a/temporary-ingress.yaml
+++ b/temporary-ingress.yaml
@@ -1,27 +0,0 @@
-# Remember to :
-# - remove custom host rule for Full (not strict) TLS from @ CF
-# - remove WAF that allows only k8s dev cluster egress
-# - update IP back to bilbong
-#
-# - remove CI/CD env var that adds docker auths
-# - remove SA key generated for this purpose
-#
-# - restore operations-developer-whitelist middleware on argo's ingress
-
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: eth-rpc
-  namespace: octant-testnet
-spec:
-  entryPoints:
-    - websecure
-  tls: {}
-  routes:
-  - match: Host(`geth.wildland.dev`)
-    kind: Rule
-    middlewares:
-      - name: cors-wildcard@file
-    services:
-    - name: eth-rpc-haproxy
-      port: 80