diff --git a/cluster/addons/dns/kube-dns/kube-dns.yaml.base b/cluster/addons/dns/kube-dns/kube-dns.yaml.base
index 64e03863d88..5b660616ff9 100644
--- a/cluster/addons/dns/kube-dns/kube-dns.yaml.base
+++ b/cluster/addons/dns/kube-dns/kube-dns.yaml.base
@@ -114,7 +114,7 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: kubedns
-        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.21.1
         resources:
           # TODO: Set memory limits when we've profiled the container for large
           # clusters, then set request = limit to keep this container in
@@ -170,7 +170,7 @@ spec:
           runAsUser: 1001
           runAsGroup: 1001
       - name: dnsmasq
-        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.21.1
         livenessProbe:
           httpGet:
             path: /healthcheck/dnsmasq
@@ -217,7 +217,7 @@ spec:
               - NET_BIND_SERVICE
               - SETGID
       - name: sidecar
-        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.21.1
         livenessProbe:
           httpGet:
             path: /metrics
diff --git a/cluster/addons/dns/kube-dns/kube-dns.yaml.in b/cluster/addons/dns/kube-dns/kube-dns.yaml.in
index 6e85497423d..7a61c9925f8 100644
--- a/cluster/addons/dns/kube-dns/kube-dns.yaml.in
+++ b/cluster/addons/dns/kube-dns/kube-dns.yaml.in
@@ -114,7 +114,7 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: kubedns
-        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.21.1
         resources:
           # TODO: Set memory limits when we've profiled the container for large
           # clusters, then set request = limit to keep this container in
@@ -170,7 +170,7 @@ spec:
           runAsUser: 1001
           runAsGroup: 1001
       - name: dnsmasq
-        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.21.1
         livenessProbe:
           httpGet:
             path: /healthcheck/dnsmasq
@@ -217,7 +217,7 @@ spec:
               - NET_BIND_SERVICE
               - SETGID
       - name: sidecar
-        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.21.1
         livenessProbe:
           httpGet:
             path: /metrics
diff --git a/cluster/addons/dns/kube-dns/kube-dns.yaml.sed b/cluster/addons/dns/kube-dns/kube-dns.yaml.sed
index ca07d221f36..654cba5ba96 100644
--- a/cluster/addons/dns/kube-dns/kube-dns.yaml.sed
+++ b/cluster/addons/dns/kube-dns/kube-dns.yaml.sed
@@ -114,7 +114,7 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: kubedns
-        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-kube-dns:1.21.1
         resources:
           # TODO: Set memory limits when we've profiled the container for large
           # clusters, then set request = limit to keep this container in
@@ -170,7 +170,7 @@ spec:
           runAsUser: 1001
           runAsGroup: 1001
       - name: dnsmasq
-        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-dnsmasq-nanny:1.21.1
         livenessProbe:
           httpGet:
             path: /healthcheck/dnsmasq
@@ -217,7 +217,7 @@ spec:
               - NET_BIND_SERVICE
               - SETGID
       - name: sidecar
-        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.17.3
+        image: k8s.gcr.io/dns/k8s-dns-sidecar:1.21.1
         livenessProbe:
           httpGet:
             path: /metrics
diff --git a/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml b/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml
index d45fd6ca5b8..086f92e5cb2 100644
--- a/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml
+++ b/cluster/addons/dns/nodelocaldns/nodelocaldns.yaml
@@ -138,7 +138,7 @@ spec:
         operator: "Exists"
       containers:
       - name: node-cache
-        image: k8s.gcr.io/dns/k8s-dns-node-cache:1.17.0
+        image: k8s.gcr.io/dns/k8s-dns-node-cache:1.21.1
         resources:
           requests:
             cpu: 25m