diff --git a/class/defaults.yml b/class/defaults.yml
index 6e2d534..4c6a8ca 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -17,7 +17,7 @@ parameters:
       oc:
         registry: quay.io
         image: appuio/oc
-        tag: v4.20
+        tag: v4.21
 
     manifests_version: ${openshift_upgrade_controller:images:openshift_upgrade_controller:tag}
 
diff --git a/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_admin_ack.yaml b/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_admin_ack.yaml
index 47a4f13..9f93b63 100644
--- a/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_admin_ack.yaml
+++ b/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_admin_ack.yaml
@@ -86,7 +86,7 @@ spec:
                   value: openshift-config
                 - name: OVERRIDES_JSON
                   value: '{}'
-              image: quay.io/appuio/oc:v4.20
+              image: quay.io/appuio/oc:v4.21
               imagePullPolicy: IfNotPresent
               name: adminack
               ports: []
diff --git a/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml b/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
index 8bd77e2..dc0d991 100644
--- a/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
+++ b/tests/golden/defaults/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
@@ -158,7 +158,7 @@ spec:
                   value: '30'
                 - name: SILENCE_TIMEOUT_HOURS
                   value: '12'
-              image: quay.io/appuio/oc:v4.20
+              image: quay.io/appuio/oc:v4.21
               imagePullPolicy: IfNotPresent
               name: silence
               ports: []
diff --git a/tests/golden/delayed-pool-silence/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml b/tests/golden/delayed-pool-silence/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
index 0cf916d..b59313c 100644
--- a/tests/golden/delayed-pool-silence/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
+++ b/tests/golden/delayed-pool-silence/openshift-upgrade-controller/openshift-upgrade-controller/90_upgrade_silence.yaml
@@ -160,7 +160,7 @@ spec:
                   value: '30'
                 - name: SILENCE_TIMEOUT_HOURS
                   value: '12'
-              image: quay.io/appuio/oc:v4.20
+              image: quay.io/appuio/oc:v4.21
               imagePullPolicy: IfNotPresent
               name: silence
               ports: []