diff --git a/bootstrap/helmfile.d/01-apps.yaml b/bootstrap/helmfile.d/01-apps.yaml
index 46c0b0c747..626c34f5b9 100644
--- a/bootstrap/helmfile.d/01-apps.yaml
+++ b/bootstrap/helmfile.d/01-apps.yaml
@@ -55,7 +55,7 @@ releases:
   - name: cert-manager
     namespace: cert-manager
     chart: oci://quay.io/jetstack/charts/cert-manager
-    version: v1.21.0
+    version: v1.21.1
     values:
       - ./templates/values.yaml.gotmpl
     needs:
diff --git a/bootstrap/helmfile.yaml b/bootstrap/helmfile.yaml
index d06325c2dc..2c1e764b89 100644
--- a/bootstrap/helmfile.yaml
+++ b/bootstrap/helmfile.yaml
@@ -30,7 +30,7 @@ releases:
   - name: cert-manager
     namespace: cert-manager
     chart: oci://quay.io/jetstack/charts/cert-manager
-    version: v1.21.0
+    version: v1.21.1
     values: ['../kubernetes/kyak/apps/cert-manager/cert-manager/app/helm/values.yaml']
     needs: ['kube-system/spegel']
 
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml b/kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml
index 3379578114..88de28952f 100644
--- a/kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml
+++ b/kubernetes/apps/cert-manager/cert-manager/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.21.0
+    tag: v1.21.1
   url: oci://quay.io/jetstack/charts/cert-manager