diff --git a/roles/download/defaults/main.yml b/roles/download/defaults/main.yml
index 3f4204cac3e8d21a3ed1256d0913aabf25a93d5d..501688a34fcd2cab3b53869ca31bc0c19d08400e 100644
--- a/roles/download/defaults/main.yml
+++ b/roles/download/defaults/main.yml
@@ -629,9 +629,9 @@ multus_image_repo: "{{ github_image_repo }}/k8snetworkplumbingwg/multus-cni"
 multus_image_tag: "{{ multus_version }}"
 
 nginx_image_repo: "{{ docker_image_repo }}/library/nginx"
-nginx_image_tag: 1.19
+nginx_image_tag: 1.21.4
 haproxy_image_repo: "{{ docker_image_repo }}/library/haproxy"
-haproxy_image_tag: 2.3
+haproxy_image_tag: 2.4.9
 
 # Coredns version should be supported by corefile-migration (or at least work with)
 # bundle with kubeadm; if not 'basic' upgrade can sometimes fail
diff --git a/roles/kubernetes/node/tasks/loadbalancer/haproxy.yml b/roles/kubernetes/node/tasks/loadbalancer/haproxy.yml
index 67f40f6ddac24d601ba20bc10e937064dbfad9e4..c8e0108170737f2767b6b97bc1fab712331793af 100644
--- a/roles/kubernetes/node/tasks/loadbalancer/haproxy.yml
+++ b/roles/kubernetes/node/tasks/loadbalancer/haproxy.yml
@@ -8,7 +8,7 @@
   file:
     path: "{{ haproxy_config_dir }}"
     state: directory
-    mode: 0700
+    mode: 0755
     owner: root
 
 - name: haproxy | Write haproxy configuration