diff --git a/roles/ipa/tasks/run_ipa_setup.yml b/roles/ipa/tasks/run_ipa_setup.yml
index d3e7739c1..7ae2b3f6d 100644
--- a/roles/ipa/tasks/run_ipa_setup.yml
+++ b/roles/ipa/tasks/run_ipa_setup.yml
@@ -65,6 +65,7 @@
       oc create -f config/rbac/scc.yaml
       (cd config/default && kustomize edit set namespace "{{ cifmw_ipa_namespace }}")
       (cd config/manager && kustomize edit set image controller=quay.io/freeipa/freeipa-operator:nightly)
+      (cd config/default && kustomize edit set image gcr.io/kubebuilder/kube-rbac-proxy=registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0)
       kustomize build config/default | kubectl apply -f -
 
 - name: Wait for it to be deployed