diff --git a/class/defaults.yml b/class/defaults.yml
index 01c7664..c8cf8f6 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -16,7 +16,7 @@ parameters:
       kube_rbac_proxy:
         registry: gcr.io
         image: kubebuilder/kube-rbac-proxy
-        tag: v0.14.1
+        tag: v0.14.4
 
     manifests_version: ${emergency_credentials_controller:images:emergency_credentials_controller:tag}
 
diff --git a/tests/golden/defaults/emergency-credentials-controller/emergency-credentials-controller/apps_v1_deployment_emergency-credentials-controller-controller-manager.yaml b/tests/golden/defaults/emergency-credentials-controller/emergency-credentials-controller/apps_v1_deployment_emergency-credentials-controller-controller-manager.yaml
index ee53a08..3d39427 100644
--- a/tests/golden/defaults/emergency-credentials-controller/emergency-credentials-controller/apps_v1_deployment_emergency-credentials-controller-controller-manager.yaml
+++ b/tests/golden/defaults/emergency-credentials-controller/emergency-credentials-controller/apps_v1_deployment_emergency-credentials-controller-controller-manager.yaml
@@ -83,7 +83,7 @@ spec:
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
         - --v=0
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.1
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.4
         name: kube-rbac-proxy
         ports:
         - containerPort: 8443