diff --git a/BUILD.bazel b/BUILD.bazel
index ce317f9b4..cee85669e 100644
--- a/BUILD.bazel
+++ b/BUILD.bazel
@@ -1,3 +1,21 @@
+load("@io_bazel_rules_docker//container:container.bzl", "container_bundle")
+load("@io_bazel_rules_docker//contrib:push-all.bzl", "docker_push")
+
+container_bundle(
+    name = "images",
+    images = {
+        "{STABLE_DOCKER_REPO}/cert-manager-controller:{STABLE_DOCKER_TAG}": "//cmd/controller:image",
+        "{STABLE_DOCKER_REPO}/cert-manager-acmesolver:{STABLE_DOCKER_TAG}": "//cmd/acmesolver:image",
+        "{STABLE_DOCKER_REPO}/cert-manager-webhook:{STABLE_DOCKER_TAG}": "//cmd/webhook:image",
+    },
+    stamp = True,
+)
+
+docker_push(
+    name = "images.push",
+    bundle = ":images",
+)
+
 filegroup(
     name = "package-srcs",
     srcs = glob(
diff --git a/cmd/acmesolver/BUILD.bazel b/cmd/acmesolver/BUILD.bazel
index 7ea5fe9d7..65cff9750 100644
--- a/cmd/acmesolver/BUILD.bazel
+++ b/cmd/acmesolver/BUILD.bazel
@@ -1,5 +1,16 @@
+load("@io_bazel_rules_docker//go:image.bzl", "go_image")
 load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
 
+go_image(
+    name = "image",
+    base = "@alpine//image",
+    embed = [":go_default_library"],
+    goarch = "amd64",
+    goos = "linux",
+    pure = "on",
+    visibility = ["//visibility:public"],
+)
+
 go_library(
     name = "go_default_library",
     srcs = ["main.go"],
diff --git a/cmd/controller/BUILD.bazel b/cmd/controller/BUILD.bazel
index 0a6a033cd..59a95a534 100644
--- a/cmd/controller/BUILD.bazel
+++ b/cmd/controller/BUILD.bazel
@@ -1,5 +1,16 @@
+load("@io_bazel_rules_docker//go:image.bzl", "go_image")
 load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
 
+go_image(
+    name = "image",
+    base = "@alpine//image",
+    embed = [":go_default_library"],
+    goarch = "amd64",
+    goos = "linux",
+    pure = "on",
+    visibility = ["//visibility:public"],
+)
+
 go_library(
     name = "go_default_library",
     srcs = [
diff --git a/cmd/webhook/BUILD.bazel b/cmd/webhook/BUILD.bazel
index 0e7087407..b08f0ca37 100644
--- a/cmd/webhook/BUILD.bazel
+++ b/cmd/webhook/BUILD.bazel
@@ -1,5 +1,16 @@
+load("@io_bazel_rules_docker//go:image.bzl", "go_image")
 load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
 
+go_image(
+    name = "image",
+    base = "@alpine//image",
+    embed = [":go_default_library"],
+    goarch = "amd64",
+    goos = "linux",
+    pure = "on",
+    visibility = ["//visibility:public"],
+)
+
 go_library(
     name = "go_default_library",
     srcs = ["main.go"],
diff --git a/hack/print-workspace-status.sh b/hack/print-workspace-status.sh
index eb00de4d5..0546b39a1 100755
--- a/hack/print-workspace-status.sh
+++ b/hack/print-workspace-status.sh
@@ -37,6 +37,8 @@ fi
 
 # TODO: properly configure this file
 cat <<EOF
+STABLE_DOCKER_REPO ${DOCKER_REPO:-quay.io/jetstack}
+STABLE_DOCKER_TAG ${DOCKER_TAG:-$APP_VERSION}
 STABLE_APP_GIT_COMMIT ${APP_GIT_COMMIT}
 STABLE_APP_GIT_STATE ${GIT_STATE}
 STABLE_APP_VERSION ${APP_VERSION}