diff --git a/helm/volsync/templates/deployment-controller.yaml b/helm/volsync/templates/deployment-controller.yaml
index 758aed8f3..26103c729 100644
--- a/helm/volsync/templates/deployment-controller.yaml
+++ b/helm/volsync/templates/deployment-controller.yaml
@@ -52,7 +52,7 @@ spec:
               drop:
                 - "ALL"
             readOnlyRootFilesystem: true
-          image: quay.io/brancz/kube-rbac-proxy:v0.18.1
+          image: "{{ include "container-image" (list . (index .Values "kube-rbac-proxy") ) }}"
           args:
             - --secure-listen-address=0.0.0.0:8443
             - --upstream=http://127.0.0.1:8080/
diff --git a/helm/volsync/values.yaml b/helm/volsync/values.yaml
index fa2ad44c9..2b823d81a 100644
--- a/helm/volsync/values.yaml
+++ b/helm/volsync/values.yaml
@@ -33,6 +33,10 @@ syncthing:
   # Overrides the image tag whose default is the chart appVersion.
   tag: ""
   image: ""
+kube-rbac-proxy:
+  repository: quay.io/brancz/kube-rbac-proxy
+  tag: "v0.18.1"
+  image: ""
 
 manageCRDs: true