diff --git a/controllers/update/reconcile.go b/controllers/update/reconcile.go
index c3e57d7..fa6f0b6 100644
--- a/controllers/update/reconcile.go
+++ b/controllers/update/reconcile.go
@@ -110,7 +110,7 @@ func (c *controller) autoUpdateOS(r *controllers.Ctx[*v2.FirewallDeployment]) er
 		}
 
 		refetched.Annotations[v2.RollSetAnnotation] = strconv.FormatBool(true)
-		if !isFullyQualifiedImageNotation {
+		if isFullyQualifiedImageNotation {
 			refetched.Spec.Template.Spec.Image = *image.ID
 		}
 
diff --git a/controllers/update/reconcile_test.go b/controllers/update/reconcile_test.go
index fcbfb05..6ba56f8 100644
--- a/controllers/update/reconcile_test.go
+++ b/controllers/update/reconcile_test.go
@@ -24,7 +24,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/client/fake"
 )
 
-func Test_controller_osImageHasChanged(t *testing.T) {
+func Test_controller_autoUpdateOS(t *testing.T) {
 	ctx := context.Background()
 	scheme := runtime.NewScheme()
 	err := v2.AddToScheme(scheme)