diff --git a/class/defaults.yml b/class/defaults.yml
index 700f7d2..a01542b 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -18,7 +18,7 @@ parameters:
       kube_rbac_proxy:
         registry: quay.io
         image: brancz/kube-rbac-proxy
-        tag: v0.20.0
+        tag: v0.20.1
 
     resources:
       provider:
diff --git a/tests/golden/defaults/machine-api-provider-cloudscale/machine-api-provider-cloudscale/11_deployment.yaml b/tests/golden/defaults/machine-api-provider-cloudscale/machine-api-provider-cloudscale/11_deployment.yaml
index b7d981e..88543e1 100644
--- a/tests/golden/defaults/machine-api-provider-cloudscale/machine-api-provider-cloudscale/11_deployment.yaml
+++ b/tests/golden/defaults/machine-api-provider-cloudscale/machine-api-provider-cloudscale/11_deployment.yaml
@@ -96,7 +96,7 @@ spec:
             - --upstream=http://localhost:8080
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.0
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
           imagePullPolicy: IfNotPresent
           name: kube-rbac-proxy-manager-metrics
           ports:
@@ -114,7 +114,7 @@ spec:
             - --upstream=http://localhost:8082
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.0
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
           imagePullPolicy: IfNotPresent
           name: kube-rbac-proxy-mac-metrics
           ports: