diff --git a/cluster/manifests/03-kube-aws-iam-controller/deployment.yaml b/cluster/manifests/03-kube-aws-iam-controller/deployment.yaml
index f014c53e52..db03dc797a 100644
--- a/cluster/manifests/03-kube-aws-iam-controller/deployment.yaml
+++ b/cluster/manifests/03-kube-aws-iam-controller/deployment.yaml
@@ -27,7 +27,7 @@ spec:
       hostNetwork: true
       containers:
       - name: kube-aws-iam-controller
-        image: container-registry.zalando.net/teapot/kube-aws-iam-controller:v0.3.0-92-g4312564
+        image: container-registry.zalando.net/teapot/kube-aws-iam-controller:v0.4.0
         env:
         - name: AWS_DEFAULT_REGION
           value: "{{.Cluster.Region}}"
diff --git a/cluster/manifests/deployment-service/controller-deployment.yaml b/cluster/manifests/deployment-service/controller-deployment.yaml
index caf186ec69..77679df9fb 100644
--- a/cluster/manifests/deployment-service/controller-deployment.yaml
+++ b/cluster/manifests/deployment-service/controller-deployment.yaml
@@ -30,7 +30,7 @@ spec:
       terminationGracePeriodSeconds: 300
       containers:
         - name: "deployment-service-controller"
-          image: "container-registry.zalando.net/teapot/deployment-controller:master-309"
+          image: "container-registry.zalando.net/teapot/deployment-controller:master-310"
           args:
             - "--config-namespace=kube-system"
             - "--decrypt-kms-alias-arn=arn:aws:kms:{{ .Cluster.Region }}:{{ .Cluster.InfrastructureAccountID }}:alias/deployment-secret"
diff --git a/cluster/manifests/deployment-service/status-service-deployment.yaml b/cluster/manifests/deployment-service/status-service-deployment.yaml
index 4c865ef273..379339d669 100644
--- a/cluster/manifests/deployment-service/status-service-deployment.yaml
+++ b/cluster/manifests/deployment-service/status-service-deployment.yaml
@@ -1,4 +1,4 @@
-# {{ $image   := "container-registry.zalando.net/teapot/deployment-status-service:master-309" }}
+# {{ $image   := "container-registry.zalando.net/teapot/deployment-status-service:master-310" }}
 # {{ $version := index (split $image ":") 1 }}
 
 apiVersion: apps/v1
diff --git a/cluster/manifests/ingress-controller/deployment.yaml b/cluster/manifests/ingress-controller/deployment.yaml
index daf2f5656e..7da3f2e4af 100644
--- a/cluster/manifests/ingress-controller/deployment.yaml
+++ b/cluster/manifests/ingress-controller/deployment.yaml
@@ -1,4 +1,4 @@
-# {{ $image := "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/kube-ingress-aws-controller:v0.20.5" }}
+# {{ $image := "926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/kube-ingress-aws-controller:v0.20.7" }}
 # {{ $version := index (split $image ":") 1 }}
 
 apiVersion: apps/v1
diff --git a/cluster/manifests/kube-metrics-adapter/deployment.yaml b/cluster/manifests/kube-metrics-adapter/deployment.yaml
index 54abe32b7b..5eeb1d6712 100644
--- a/cluster/manifests/kube-metrics-adapter/deployment.yaml
+++ b/cluster/manifests/kube-metrics-adapter/deployment.yaml
@@ -27,7 +27,7 @@ spec:
       serviceAccountName: custom-metrics-apiserver
       containers:
       - name: kube-metrics-adapter
-        image: container-registry.zalando.net/teapot/kube-metrics-adapter:v0.2.8-16-g6d6c08e
+        image: container-registry.zalando.net/teapot/kube-metrics-adapter:v0.2.9-3-g0eb3d79
         env:
         - name: AWS_REGION
           value: {{ .Cluster.Region }}
diff --git a/cluster/manifests/stackset-controller/deployment.yaml b/cluster/manifests/stackset-controller/deployment.yaml
index 28c879b634..8dd0d6a589 100644
--- a/cluster/manifests/stackset-controller/deployment.yaml
+++ b/cluster/manifests/stackset-controller/deployment.yaml
@@ -1,4 +1,4 @@
-{{ $version := "v1.4.126" }}
+{{ $version := "v1.4.128" }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/cluster/manifests/zalando-iam-aws-proxy/deployment.yaml b/cluster/manifests/zalando-iam-aws-proxy/deployment.yaml
index eace51ab5d..00c8a1955d 100644
--- a/cluster/manifests/zalando-iam-aws-proxy/deployment.yaml
+++ b/cluster/manifests/zalando-iam-aws-proxy/deployment.yaml
@@ -27,7 +27,7 @@ spec:
       serviceAccountName: zalando-iam-aws-proxy
       containers:
       - name: proxy
-        image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/zalando-iam-aws-proxy:main-16
+        image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/zalando-iam-aws-proxy:main-17
         args:
         - "--apiserver-url=https://kubernetes.default.svc.cluster.local"
         - "--ca-file-path=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
diff --git a/cluster/node-pools/master-default/userdata.yaml b/cluster/node-pools/master-default/userdata.yaml
index 991ca4ea14..1ede1af5c6 100644
--- a/cluster/node-pools/master-default/userdata.yaml
+++ b/cluster/node-pools/master-default/userdata.yaml
@@ -216,7 +216,7 @@ write_files:
             limits:
               memory: {{ .Values.InstanceInfo.MemoryFraction (parseInt64 .Cluster.ConfigItems.apiserver_memory_limit_percent)}}
 {{- end }}
-        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-308
+        - image: 926694233939.dkr.ecr.eu-central-1.amazonaws.com/production_namespace/teapot/admission-controller:master-309
           name: admission-controller
           lifecycle:
             preStop: