diff --git a/class/defaults.yml b/class/defaults.yml
index 02a9ae12..21d5d124 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -63,7 +63,7 @@ parameters:
       kube_rbac_proxy:
         registry: quay.io
         repository: brancz/kube-rbac-proxy
-        tag: v0.20.1
+        tag: v0.20.2
 
     instances: {}
 
diff --git a/tests/golden/defaults/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml b/tests/golden/defaults/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
index f122de83..7b42af90 100644
--- a/tests/golden/defaults/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
+++ b/tests/golden/defaults/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
@@ -23,7 +23,7 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 8443
diff --git a/tests/golden/https-catalog/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml b/tests/golden/https-catalog/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
index f122de83..7b42af90 100644
--- a/tests/golden/https-catalog/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
+++ b/tests/golden/https-catalog/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
@@ -23,7 +23,7 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 8443
diff --git a/tests/golden/openshift/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml b/tests/golden/openshift/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
index f122de83..7b42af90 100644
--- a/tests/golden/openshift/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
+++ b/tests/golden/openshift/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
@@ -23,7 +23,7 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 8443
diff --git a/tests/golden/prometheus/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml b/tests/golden/prometheus/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
index f122de83..7b42af90 100644
--- a/tests/golden/prometheus/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
+++ b/tests/golden/prometheus/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
@@ -23,7 +23,7 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 8443
diff --git a/tests/golden/syn-teams/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml b/tests/golden/syn-teams/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
index f122de83..7b42af90 100644
--- a/tests/golden/syn-teams/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
+++ b/tests/golden/syn-teams/argocd/argocd/10_operator/apps_v1_deployment_syn-argocd-operator-controller-manager.yaml
@@ -23,7 +23,7 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
-          image: quay.io/brancz/kube-rbac-proxy:v0.20.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.20.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 8443