diff --git a/class/defaults.yml b/class/defaults.yml
index a7afe12..d8c76f6 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -242,7 +242,7 @@ parameters:
       kube_rbac_proxy:
         registry: quay.io
         repository: brancz/kube-rbac-proxy
-        tag: v0.18.1
+        tag: v0.18.2
 
     capacityAlerts:
       enabled: true
diff --git a/tests/golden/custom-rules/openshift4-monitoring/openshift4-monitoring/appuio_node_exporter.yaml b/tests/golden/custom-rules/openshift4-monitoring/openshift4-monitoring/appuio_node_exporter.yaml
index e0792bd..0d12d60 100644
--- a/tests/golden/custom-rules/openshift4-monitoring/openshift4-monitoring/appuio_node_exporter.yaml
+++ b/tests/golden/custom-rules/openshift4-monitoring/openshift4-monitoring/appuio_node_exporter.yaml
@@ -190,7 +190,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: status.podIP
-          image: quay.io/brancz/kube-rbac-proxy:v0.18.1
+          image: quay.io/brancz/kube-rbac-proxy:v0.18.2
           name: kube-rbac-proxy
           ports:
             - containerPort: 9199