diff --git a/licenses.d2iq.yaml b/licenses.d2iq.yaml
index fa0844b7b..d498bade4 100644
--- a/licenses.d2iq.yaml
+++ b/licenses.d2iq.yaml
@@ -298,21 +298,11 @@ resources:
       - license_path: LICENSE
         ref: knative-${image_tag}
         url: https://github.com/knative/serving
-  - container_image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
-    sources:
-      - license_path: LICENSE
-        ref: ${image_tag}
-        url: https://github.com/brancz/kube-rbac-proxy
   - container_image: quay.io/brancz/kube-rbac-proxy:v0.18.1
     sources:
       - license_path: LICENSE
         ref: ${image_tag}
         url: https://github.com/brancz/kube-rbac-proxy
-  - container_image: quay.io/brancz/kube-rbac-proxy:v0.18.0
-    sources:
-      - license_path: LICENSE
-        ref: ${image_tag}
-        url: https://github.com/brancz/kube-rbac-proxy
   - container_image: ghcr.io/fluxcd/helm-controller:v0.37.4
     sources:
       - license_path: LICENSE
@@ -394,11 +384,6 @@ resources:
       - license_path: LICENSE
         ref: ${image_tag%-ubuntu22.04}
         url: https://github.com/NVIDIA/dcgm-exporter
-  - container_image: quay.io/brancz/kube-rbac-proxy:v0.14.2
-    sources:
-      - license_path: LICENSE
-        ref: ${image_tag}
-        url: https://github.com/brancz/kube-rbac-proxy
   - container_image: ghcr.io/mesosphere/dkp-container-images/ceph/ceph:v18.2.2
     sources:
       - license_path: COPYING
diff --git a/services/dex/2.14.0/defaults/cm.yaml b/services/dex/2.14.0/defaults/cm.yaml
index 64860da6b..ff050af56 100644
--- a/services/dex/2.14.0/defaults/cm.yaml
+++ b/services/dex/2.14.0/defaults/cm.yaml
@@ -105,6 +105,12 @@ data:
     dex-controller:
       priorityClassName: "dkp-critical-priority"
       controller:
+        proxy:
+          image:
+            repository: quay.io/brancz/kube-rbac-proxy
+            tag: v0.18.1
+            pullPolicy: IfNotPresent
+          resources: {}
         manager:
           dexConfigSecretName: dex
           dexDeploymentName: dex
diff --git a/services/kube-prometheus-stack/63.0.0/defaults/cm.yaml b/services/kube-prometheus-stack/63.0.0/defaults/cm.yaml
index 7a61019fd..7eaa1208f 100644
--- a/services/kube-prometheus-stack/63.0.0/defaults/cm.yaml
+++ b/services/kube-prometheus-stack/63.0.0/defaults/cm.yaml
@@ -462,8 +462,6 @@ data:
             prometheus.kommander.d2iq.io/select: "true"
     prometheus-node-exporter:
       priorityClassName: "dkp-critical-priority"
-      kubeRBACProxy:
-        enabled: true
       prometheus:
         monitor:
           scheme: https
diff --git a/services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy/kube-rbac-proxy.yaml b/services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy/kube-rbac-proxy.yaml
index e0c14d618..3bade7df8 100644
--- a/services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy/kube-rbac-proxy.yaml
+++ b/services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy/kube-rbac-proxy.yaml
@@ -91,7 +91,7 @@ spec:
               mountPath: /etc/kube-rbac-proxy/etcd
       containers:
         - name: kube-rbac-proxy
-          image: quay.io/brancz/kube-rbac-proxy:v0.14.2
+          image: quay.io/brancz/kube-rbac-proxy:v0.18.1
           args:
             - "--secure-listen-address=0.0.0.0:8443"
             - "--tls-cert-file=/etc/kube-rbac-proxy/tls/tls.crt"