# Update the Controller Manager

By default, config/default/manager\_auth\_proxy\_patch.yaml uses an uncertified kubebuilder image. In order to pass certification, it'll need to be changed to the certified image.

Edit the controller manager

```
vi config/default/manager_auth_proxy_patch.yaml
```

Replace the image with the certified version, registry.redhat.io/openshift4/ose-kube-rbac-proxy

```
# This patch inject a sidecar container which is a HTTP proxy for the
# controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
apiVersion: apps/v1
kind: Deployment
metadata:
  name: controller-manager
  namespace: system
spec:
  template:
    spec:
      containers:
      - name: kube-rbac-proxy
        #use this certified image
        image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:latest
```
