diff --git a/services/vault/k8s-auth-config-cronjob.yaml b/services/vault/k8s-auth-config-cronjob.yaml
index 11d0a7da9..cea7029cc 100644
--- a/services/vault/k8s-auth-config-cronjob.yaml
+++ b/services/vault/k8s-auth-config-cronjob.yaml
@@ -24,7 +24,7 @@ spec:
             node-role.kubernetes.io/worker: "true"
           containers:
             - name: configure-k8s-auth
-              image: hashicorp/vault:1.20.4
+              image: hashicorp/vault:1.21.4
               imagePullPolicy: IfNotPresent
               command:
                 - sh
diff --git a/services/vault/oidc-config-cronjob.yaml b/services/vault/oidc-config-cronjob.yaml
index 21f3bfa53..fd2ed7cf6 100644
--- a/services/vault/oidc-config-cronjob.yaml
+++ b/services/vault/oidc-config-cronjob.yaml
@@ -51,7 +51,7 @@ spec:
             node-role.kubernetes.io/worker: "true"
           containers:
             - name: configure-oidc
-              image: hashicorp/vault:1.20.4
+              image: hashicorp/vault:1.21.4
               imagePullPolicy: IfNotPresent
               command:
                 - /entrypoint.sh
diff --git a/services/vault/statefulset.yaml b/services/vault/statefulset.yaml
index 6fa32e18e..4a8d47bb5 100644
--- a/services/vault/statefulset.yaml
+++ b/services/vault/statefulset.yaml
@@ -45,7 +45,7 @@ spec:
               mountPath: /vault/config
       containers:
         - name: vault
-          image: hashicorp/vault:1.20.4
+          image: hashicorp/vault:1.21.4
           imagePullPolicy: IfNotPresent
           command: ["vault"]
           args: ["server", "-config=/vault/config/local.hcl"]