diff --git a/config/samples/controlplane.yaml b/config/samples/controlplane.yaml
index c4c822e01..0de7d9cd6 100644
--- a/config/samples/controlplane.yaml
+++ b/config/samples/controlplane.yaml
@@ -14,7 +14,7 @@ spec:
         containers:
         - name: controller
           # renovate: datasource=docker versioning=docker
-          image: kong/kubernetes-ingress-controller:3.2.0
+          image: kong/kubernetes-ingress-controller:3.2.1
           readinessProbe:
             initialDelaySeconds: 1
             periodSeconds: 3
diff --git a/config/samples/gateway-httproute-allowedroutes.yaml b/config/samples/gateway-httproute-allowedroutes.yaml
index 9071aab16..674f5e695 100644
--- a/config/samples/gateway-httproute-allowedroutes.yaml
+++ b/config/samples/gateway-httproute-allowedroutes.yaml
@@ -82,7 +82,7 @@ spec:
           containers:
           - name: controller
             # renovate: datasource=docker versioning=docker
-            image: kong/kubernetes-ingress-controller:3.2.0
+            image: kong/kubernetes-ingress-controller:3.2.1
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gateway-httproute.yaml b/config/samples/gateway-httproute.yaml
index ed9c409bc..5eee77172 100644
--- a/config/samples/gateway-httproute.yaml
+++ b/config/samples/gateway-httproute.yaml
@@ -143,7 +143,7 @@ spec:
           containers:
           - name: controller
             # renovate: datasource=docker versioning=docker
-            image: kong/kubernetes-ingress-controller:3.2.0
+            image: kong/kubernetes-ingress-controller:3.2.1
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml b/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
index 35e159e0b..781228ed5 100644
--- a/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
+++ b/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
@@ -78,7 +78,7 @@ spec:
           containers:
           - name: controller
             # renovate: datasource=docker versioning=docker
-            image: kong/kubernetes-ingress-controller:3.2.0
+            image: kong/kubernetes-ingress-controller:3.2.1
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/internal/versions/controlplane.go b/internal/versions/controlplane.go
index bca648ed4..4d0f8322b 100644
--- a/internal/versions/controlplane.go
+++ b/internal/versions/controlplane.go
@@ -13,7 +13,7 @@ const (
 	// and those tests create KIC's URLs for things like roles or CRDs.
 	// Since KIC only defines the full tags in its repo (as expected) we cannot use
 	// a partial version here, as it would not match KIC's tag.
-	DefaultControlPlaneVersion = "3.2.0" // renovate: datasource=docker depName=kong/kubernetes-ingress-controller
+	DefaultControlPlaneVersion = "3.2.1" // renovate: datasource=docker depName=kong/kubernetes-ingress-controller
 )
 
 // minimumControlPlaneVersion indicates the bare minimum version of the