diff --git a/core/installer/values-tmpl/cert-manager.cue b/core/installer/values-tmpl/cert-manager.cue
index bc8a37a..78df18c 100644
--- a/core/installer/values-tmpl/cert-manager.cue
+++ b/core/installer/values-tmpl/cert-manager.cue
@@ -9,21 +9,21 @@
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-controller"
-			tag:        "v1.19.6"
+			tag:        "v1.20.3"
 			pullPolicy: "IfNotPresent"
 		}
 		cainjector: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-cainjector"
-			tag:        "v1.19.6"
+			tag:        "v1.20.3"
 			pullPolicy: "IfNotPresent"
 		}
 		webhook: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-webhook"
-			tag:        "v1.19.6"
+			tag:        "v1.20.3"
 			pullPolicy: "IfNotPresent"
 		}
 		dnsChallengeSolver: {
@@ -64,6 +64,7 @@
                                 }
 				dns01RecursiveNameserversOnly: true
 				dns01RecursiveNameservers:     "1.1.1.1:53,8.8.8.8:53"
+                                networkPolicy: enabled: false
 				image: {
 					repository: images.certManager.fullName
 					tag:        images.certManager.tag
@@ -75,6 +76,7 @@
 						tag:        images.cainjector.tag
 						pullPolicy: images.cainjector.pullPolicy
 					}
+                                        networkPolicy: enabled: false
 				}
 				webhook: {
 					image: {
@@ -82,6 +84,7 @@
 						tag:        images.webhook.tag
 						pullPolicy: images.webhook.pullPolicy
 					}
+                                        networkPolicy: enabled: false
 				}
 			}
 		}