diff --git a/cluster/kube/lib/cert-manager.libsonnet b/cluster/kube/lib/cert-manager.libsonnet
index 2598798..e9e4a4b 100644
--- a/cluster/kube/lib/cert-manager.libsonnet
+++ b/cluster/kube/lib/cert-manager.libsonnet
@@ -11,6 +11,7 @@
         cfg:: {
             namespace: "cert-manager",
             enableWebhook: false,
+            version: "v0.9.1",
         },
 
         metadata:: {
@@ -389,7 +390,7 @@
                             serviceAccountName: env.sas.cainjector.metadata.name,
                             containers_: {
                                 cainjector: kube.Container("cainjector") {
-                                    image: "quay.io/jetstack/cert-manager-cainjector:v0.7.0",
+                                    image: "quay.io/jetstack/cert-manager-cainjector:" + cfg.version,
                                     args: [
                                         "--leader-election-namespace=%s" % [cfg.namespace],
                                     ],
@@ -415,7 +416,7 @@
                             serviceAccountName: env.sas.webhook.metadata.name,
                             containers_: {
                                 webhook: kube.Container("webhook") {
-                                    image: "quay.io/jetstack/cert-manager-webhook:v0.7.0",
+                                    image: "quay.io/jetstack/cert-manager-webhook:" + cfg.version,
                                     args: [
                                         "--v=12",
                                         "--secure-port=6443",
@@ -452,7 +453,7 @@
                             serviceAccountName: env.sas.certmanager.metadata.name,
                             containers_: {
                                 webhook: kube.Container("cert-manager") {
-                                    image: "quay.io/jetstack/cert-manager-controller:v0.7.0",
+                                    image: "quay.io/jetstack/cert-manager-controller:" + cfg.version,
                                     args: [
                                         "--cluster-resource-namespace=%s" % [cfg.namespace],
                                         "--leader-election-namespace=%s" % [cfg.namespace],