diff --git a/install/installer/pkg/common/common.go b/install/installer/pkg/common/common.go
index c3467e4c35f4de..e50370696e4ddd 100644
--- a/install/installer/pkg/common/common.go
+++ b/install/installer/pkg/common/common.go
@@ -548,6 +548,7 @@ func KubeRBACProxyContainerWithConfig(ctx *RenderContext) *corev1.Container {
 			"--logtostderr",
 			fmt.Sprintf("--insecure-listen-address=[$(IP)]:%d", baseserver.BuiltinMetricsPort),
 			fmt.Sprintf("--upstream=http://127.0.0.1:%d/", baseserver.BuiltinMetricsPort),
+			"--http2-disable",
 		},
 		Ports: []corev1.ContainerPort{
 			{Name: baseserver.BuiltinMetricsPortName, ContainerPort: baseserver.BuiltinMetricsPort},
diff --git a/install/installer/pkg/common/common_test.go b/install/installer/pkg/common/common_test.go
index dcf89d62a1bf74..ebdc40921d2baf 100644
--- a/install/installer/pkg/common/common_test.go
+++ b/install/installer/pkg/common/common_test.go
@@ -26,6 +26,7 @@ func TestKubeRBACProxyContainer_DefaultPorts(t *testing.T) {
 		"--logtostderr",
 		fmt.Sprintf("--insecure-listen-address=[$(IP)]:%v", baseserver.BuiltinMetricsPort),
 		fmt.Sprintf("--upstream=http://%v/", common.LocalhostPrometheusAddr()),
+		"--http2-disable",
 	}, container.Args)
 	require.Equal(t, []corev1.ContainerPort{
 		{Name: baseserver.BuiltinMetricsPortName, ContainerPort: baseserver.BuiltinMetricsPort},
@@ -41,6 +42,7 @@ func TestKubeRBACProxyContainerWithConfig(t *testing.T) {
 		"--logtostderr",
 		fmt.Sprintf("--insecure-listen-address=[$(IP)]:%d", baseserver.BuiltinMetricsPort),
 		fmt.Sprintf("--upstream=http://%v/", common.LocalhostPrometheusAddr()),
+		"--http2-disable",
 	}, container.Args)
 	require.Equal(t, []corev1.ContainerPort{
 		{Name: baseserver.BuiltinMetricsPortName, ContainerPort: baseserver.BuiltinMetricsPort},
diff --git a/install/installer/pkg/common/constants.go b/install/installer/pkg/common/constants.go
index 487f0aea3ad305..c361b41094ef7e 100644
--- a/install/installer/pkg/common/constants.go
+++ b/install/installer/pkg/common/constants.go
@@ -22,7 +22,7 @@ const (
 	InClusterDbSecret           = "mysql"
 	KubeRBACProxyRepo           = "quay.io"
 	KubeRBACProxyImage          = "brancz/kube-rbac-proxy"
-	KubeRBACProxyTag            = "v0.14.2"
+	KubeRBACProxyTag            = "v0.15.0"
 	MinioServiceAPIPort         = 9000
 	MonitoringChart             = "monitoring"
 	ProxyComponent              = "proxy"