diff --git a/docs/configuration.md b/docs/configuration.md
index aaba265..00d3424 100644
--- a/docs/configuration.md
+++ b/docs/configuration.md
@@ -8,6 +8,7 @@ The operator iself accepts command line arguments to override some of the defaul
 
 | **Command line argument**      | **Type** | **Description**                                                                                            | **Default Value**          |   |
 |--------------------------------|----------|------------------------------------------------------------------------------------------------------------|----------------------------|---|
+| `--default-image`              | string   | The default cloudflared image to use for tunnels                                                           |                            |   |
 | `--cluster-resource-namespace` | string   | The default namespace for cluster scoped resources                                                         | cloudflare-operator-system |   |
 | `--overwrite-unmanaged-dns`    | boolean  | Overwrite existing DNS records that do not have a corresponding managed TXT record                         | false                      |   |
 | `--leader-elect`               | boolean  | Enable leader election for controller manager, this is optional for operator running with a single replica | true                       |   |
@@ -58,7 +59,9 @@ spec:
 
   # cloudflared configuration
   fallbackTarget: http_status:404           # The default service to point cloudflared to. Defaults to http_status:404
-  image: cloudflare/cloudflared:2022.3.1    # Image to run. Used for running an up-to-date image. Can be swapped out to an arm based image if needed
+  podSpec:                                  # Overwrite any fields of the generated pod spec for cloudflared
+    containers:
+      - image: cloudflared:latest           # Overwrite image to be used
   noTlsVerify: false                        # Disables the TLS verification to backend services globally
   originCaPool: homelab-ca                  # Secret containing CA certificates to trust. Must contain tls.crt to be trusted globally and optionally other certificates (see the caPool service annotation for usage)
   size: 1                                   # Replica count for the tunnel deployment