diff --git a/hieradata/roles/infra/puppet/master.yaml b/hieradata/roles/infra/puppet/master.yaml
index 62ebff6..30eabdb 100644
--- a/hieradata/roles/infra/puppet/master.yaml
+++ b/hieradata/roles/infra/puppet/master.yaml
@@ -55,7 +55,7 @@ profiles::helpers::sshsignhost::vault_config:
 # Vault signing helpers, delivered as RPMs from the rpm-internal repo.
 profiles::packages::include:
   certmanager:
-    ensure: '0.1.0'
+    ensure: '0.2.0'
   sshsignhost:
     ensure: '0.1.0'