diff --git a/pkg/cli/alpha/config-gen/templates/patches/controller-manager/01-auth-proxy.template.yaml b/pkg/cli/alpha/config-gen/templates/patches/controller-manager/01-auth-proxy.template.yaml
index 6ab6f04c693..7f50db1d6fc 100644
--- a/pkg/cli/alpha/config-gen/templates/patches/controller-manager/01-auth-proxy.template.yaml
+++ b/pkg/cli/alpha/config-gen/templates/patches/controller-manager/01-auth-proxy.template.yaml
@@ -4,7 +4,7 @@ spec:
     spec:
       containers:
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/componentconfig/expected.yaml b/pkg/cli/alpha/config-gen/testdata/componentconfig/expected.yaml
index 8b18121b577..86053b687c3 100644
--- a/pkg/cli/alpha/config-gen/testdata/componentconfig/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/componentconfig/expected.yaml
@@ -288,7 +288,7 @@ spec:
           mountPath: /controller_manager_config.yaml
           subPath: controller_manager_config.yaml
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/default/expected.yaml b/pkg/cli/alpha/config-gen/testdata/default/expected.yaml
index fd41b2171c0..a8105b02c0c 100644
--- a/pkg/cli/alpha/config-gen/testdata/default/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/default/expected.yaml
@@ -285,7 +285,7 @@ spec:
             cpu: 100m
             memory: 20Mi
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/enablecertmanager/expected.yaml b/pkg/cli/alpha/config-gen/testdata/enablecertmanager/expected.yaml
index a3e41f41340..ea72d7a8573 100644
--- a/pkg/cli/alpha/config-gen/testdata/enablecertmanager/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/enablecertmanager/expected.yaml
@@ -307,7 +307,7 @@ spec:
           name: cert
           readOnly: true
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/enableconversionwebhooks/expected.yaml b/pkg/cli/alpha/config-gen/testdata/enableconversionwebhooks/expected.yaml
index a38ad6ae88e..16f13a10a09 100644
--- a/pkg/cli/alpha/config-gen/testdata/enableconversionwebhooks/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/enableconversionwebhooks/expected.yaml
@@ -316,7 +316,7 @@ spec:
           name: cert
           readOnly: true
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/enableprometheus/expected.yaml b/pkg/cli/alpha/config-gen/testdata/enableprometheus/expected.yaml
index eb75495f1d4..590a8344bf4 100644
--- a/pkg/cli/alpha/config-gen/testdata/enableprometheus/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/enableprometheus/expected.yaml
@@ -285,7 +285,7 @@ spec:
             cpu: 100m
             memory: 20Mi
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
diff --git a/pkg/cli/alpha/config-gen/testdata/enablewebhooks/expected.yaml b/pkg/cli/alpha/config-gen/testdata/enablewebhooks/expected.yaml
index 9daaedafe82..836388a028f 100644
--- a/pkg/cli/alpha/config-gen/testdata/enablewebhooks/expected.yaml
+++ b/pkg/cli/alpha/config-gen/testdata/enablewebhooks/expected.yaml
@@ -307,7 +307,7 @@ spec:
           name: cert
           readOnly: true
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.11.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"