diff --git a/talos/k8s/monitoring/kube-state-metrics.yaml b/talos/k8s/monitoring/kube-state-metrics.yaml
index a311a2d..1adc7c5 100644
--- a/talos/k8s/monitoring/kube-state-metrics.yaml
+++ b/talos/k8s/monitoring/kube-state-metrics.yaml
@@ -202,7 +202,7 @@ spec:
         - --secure-listen-address=:8443
         - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
         - --upstream=http://127.0.0.1:8081/
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
+        image: quay.io/brancz/kube-rbac-proxy:v0.19.0
         name: kube-rbac-proxy-main
         ports:
         - containerPort: 8443
@@ -229,7 +229,7 @@ spec:
         - --secure-listen-address=:9443
         - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
         - --upstream=http://127.0.0.1:8082/
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
+        image: quay.io/brancz/kube-rbac-proxy:v0.19.0
         name: kube-rbac-proxy-self
         ports:
         - containerPort: 9443
diff --git a/talos/k8s/monitoring/node-exporter.yaml b/talos/k8s/monitoring/node-exporter.yaml
index b0785e2..c5b7cf5 100644
--- a/talos/k8s/monitoring/node-exporter.yaml
+++ b/talos/k8s/monitoring/node-exporter.yaml
@@ -76,7 +76,7 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: status.podIP
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
+        image: quay.io/brancz/kube-rbac-proxy:v0.19.0
         imagePullPolicy: IfNotPresent
         name: kube-rbac-proxy
         ports: