diff --git a/infra/inttest/run_pipeline.sh b/infra/inttest/run_pipeline.sh
index b825e3d..f6c1e53 100755
--- a/infra/inttest/run_pipeline.sh
+++ b/infra/inttest/run_pipeline.sh
@@ -299,7 +299,7 @@ stage_end "infra_deploy" "ok"
 # ══════════════════════════════════════════════════════════════════════════════
 stage_start "seed_data"
 
-SEED_IMAGE="ghcr.io/celesrenata/stonks-oracle/query-api:${IMAGE_TAG}"
+SEED_IMAGE="registry.celestium.life/stonks-oracle/query-api:${IMAGE_TAG}"
 
 log "Seeding sandbox database ..."
 if ! kubectl run seed-sandbox \
diff --git a/infra/inttest/runner.yaml b/infra/inttest/runner.yaml
index 1774f39..99a7c50 100644
--- a/infra/inttest/runner.yaml
+++ b/infra/inttest/runner.yaml
@@ -31,8 +31,6 @@ spec:
         app.kubernetes.io/part-of: stonks-oracle
     spec:
       automountServiceAccountToken: false
-      imagePullSecrets:
-        - name: ghcr-credentials
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
@@ -43,7 +41,7 @@ spec:
       restartPolicy: Never
       containers:
         - name: inttest-runner
-          image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
+          image: registry.celestium.life/stonks-oracle/query-api:latest
           imagePullPolicy: Always
           command: ["python", "-m", "pytest"]
           args:
diff --git a/infra/inttest/services.yaml b/infra/inttest/services.yaml
index 5f05af2..657dd90 100644
--- a/infra/inttest/services.yaml
+++ b/infra/inttest/services.yaml
@@ -1,7 +1,7 @@
 # Application services for integration test sandbox
 # Namespace is substituted at runtime via envsubst
 # All env vars are inlined (no ConfigMap) so services are self-contained
-# Images: ghcr.io/celesrenata/stonks-oracle/<service>:latest
+# Images: registry.celestium.life/stonks-oracle/<service>:latest
 #
 # Services:
 #   - query-api        (uvicorn services.api.app:app)
@@ -31,8 +31,6 @@ spec:
         tier: api
     spec:
       automountServiceAccountToken: false
-      imagePullSecrets:
-        - name: ghcr-credentials
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
@@ -42,7 +40,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: query-api
-          image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
+          image: registry.celestium.life/stonks-oracle/query-api:latest
           imagePullPolicy: Always
           command: ["uvicorn", "services.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
           ports:
@@ -148,8 +146,6 @@ spec:
         tier: api
     spec:
       automountServiceAccountToken: false
-      imagePullSecrets:
-        - name: ghcr-credentials
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
@@ -159,7 +155,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: symbol-registry
-          image: ghcr.io/celesrenata/stonks-oracle/symbol-registry:latest
+          image: registry.celestium.life/stonks-oracle/symbol-registry:latest
           imagePullPolicy: Always
           command: ["uvicorn", "services.symbol_registry.app:app", "--host", "0.0.0.0", "--port", "8000"]
           ports:
@@ -265,8 +261,6 @@ spec:
         tier: api
     spec:
       automountServiceAccountToken: false
-      imagePullSecrets:
-        - name: ghcr-credentials
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
@@ -276,7 +270,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: risk
-          image: ghcr.io/celesrenata/stonks-oracle/risk:latest
+          image: registry.celestium.life/stonks-oracle/risk:latest
           imagePullPolicy: Always
           command: ["uvicorn", "services.risk.app:app", "--host", "0.0.0.0", "--port", "8000"]
           ports:
@@ -382,8 +376,6 @@ spec:
         tier: api
     spec:
       automountServiceAccountToken: false
-      imagePullSecrets:
-        - name: ghcr-credentials
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
@@ -393,7 +385,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: trading-engine
-          image: ghcr.io/celesrenata/stonks-oracle/trading-engine:latest
+          image: registry.celestium.life/stonks-oracle/trading-engine:latest
           imagePullPolicy: Always
           command: ["uvicorn", "services.trading.app:app", "--host", "0.0.0.0", "--port", "8000"]
           ports: