diff --git a/tpl/images/images.go b/tpl/images/images.go
index 66999aa37..f5d32f449 100644
--- a/tpl/images/images.go
+++ b/tpl/images/images.go
@@ -71,6 +71,7 @@ func (ns *Namespace) Config(path interface{}) (image.Config, error) {
 	if err != nil {
 		return image.Config{}, err
 	}
+	defer f.Close()
 
 	config, _, err = image.DecodeConfig(f)
 	if err != nil {