diff --git a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
index 6c81c651dec..3f609efc8d2 100644
--- a/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
+++ b/cluster/addons/calico-policy-controller/calico-node-daemonset.yaml
@@ -28,7 +28,7 @@ spec:
       terminationGracePeriodSeconds: 0
       initContainers:
         - name: install-cni
-          image: gcr.io/projectcalico-org/cni:v3.7.4
+          image: gcr.io/projectcalico-org/cni:v3.8.2
           command: ["/install-cni.sh"]
           env:
             - name: CNI_CONF_NAME
@@ -37,7 +37,7 @@ spec:
               value: |-
                 {
                   "name": "k8s-pod-network",
-                  "cniVersion": "0.3.0",
+                  "cniVersion": "0.3.1",
                   "plugins": [
                     {
                       "type": "calico",
@@ -79,7 +79,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: gcr.io/projectcalico-org/node:v3.7.4
+          image: gcr.io/projectcalico-org/node:v3.8.2
           env:
             - name: CALICO_DISABLE_FILE_LOGGING
               value: "true"
diff --git a/cluster/addons/calico-policy-controller/typha-deployment.yaml b/cluster/addons/calico-policy-controller/typha-deployment.yaml
index 71d4191d7e7..0dd431160e5 100644
--- a/cluster/addons/calico-policy-controller/typha-deployment.yaml
+++ b/cluster/addons/calico-policy-controller/typha-deployment.yaml
@@ -24,7 +24,7 @@ spec:
       hostNetwork: true
       serviceAccountName: calico
       containers:
-      - image: gcr.io/projectcalico-org/typha:v3.7.4
+      - image: gcr.io/projectcalico-org/typha:v3.8.2
         name: calico-typha
         ports:
         - containerPort: 5473