diff --git a/docs/vars-doc.md b/docs/vars-doc.md
index e4529d9..98bc4e7 100644
--- a/docs/vars-doc.md
+++ b/docs/vars-doc.md
@@ -347,6 +347,12 @@ ppc64le: true
 
 ### NFS Configuration
 
+```
+nfs_provisioner_image: gcr.io/k8s-staging-sig-storage/nfs-subdir-external-provisioner:v4.0.0
+```
+
+* `nfs_provisioner_image` - Set the nfs_provisioner image to use. (default: gcr.io/k8s-staging-sig-storage/nfs-subdir-external-provisioner:v4.0.0)
+
 This playbook sets up a script called [helpernodecheck](../templates/checker.sh.j2). That script can be used to set up the helpernode as an NFS server (this is the default). It uses the [k8s nfs setup in the incubator repo](https://github.com/kubernetes-incubator/external-storage/blob/master/nfs-client/README.md).
 
 > :warning: Run `helpernodecheck nfs-info` for information after the playbook runs.
diff --git a/tasks/setup_keepalived.yaml b/tasks/setup_keepalived.yaml
index 47185dc..b77d932 100644
--- a/tasks/setup_keepalived.yaml
+++ b/tasks/setup_keepalived.yaml
@@ -20,7 +20,7 @@
 
 - name: Set low_priority fact
   set_fact:
-    low_priority: "{{ low_priority | default([]) }} + [ {{ item.priority }} ]"
+    low_priority: "{{ low_priority | default([]) + [ item.priority ] }}"
   with_items:
     - "{{ high_availability.helpernodes }}"
   when: item.state == "BACKUP"
diff --git a/templates/nfs-provisioner-deployment.yaml.j2 b/templates/nfs-provisioner-deployment.yaml.j2
index 39da54b..08e59aa 100644
--- a/templates/nfs-provisioner-deployment.yaml.j2
+++ b/templates/nfs-provisioner-deployment.yaml.j2
@@ -20,7 +20,7 @@ spec:
 {% if setup_registry.deploy and  setup_registry.autosync_registry %}
           image: registry.{{ dns.clusterid }}.{{ dns.domain }}:5000/nfs-client-provisioner:latest
 {% else %}
-          image: gcr.io/k8s-staging-sig-storage/nfs-subdir-external-provisioner:v4.0.0
+          image: "{{ nfs_provisioner_image | default("gcr.io/k8s-staging-sig-storage/nfs-subdir-external-provisioner:v4.0.0") }}"
 {% endif %}
           volumeMounts:
             - name: nfs-client-root