diff --git a/.ci-operator.yaml b/.ci-operator.yaml
index e2fbe81824..a83f0f8430 100644
--- a/.ci-operator.yaml
+++ b/.ci-operator.yaml
@@ -1,4 +1,4 @@
 build_root_image:
   name: release
   namespace: openshift
-  tag: rhel-9-release-golang-1.20-openshift-4.16
+  tag: rhel-9-release-golang-1.21-openshift-4.16
diff --git a/Dockerfile.admission-webhook.ocp b/Dockerfile.admission-webhook.ocp
index aeaf6dc333..717e3c933b 100644
--- a/Dockerfile.admission-webhook.ocp
+++ b/Dockerfile.admission-webhook.ocp
@@ -1,12 +1,12 @@
 # Dockerfile used by OSBS and by prow CI.
-FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.20-openshift-4.15 AS builder
+FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.21-openshift-4.16 AS builder
 WORKDIR /go/src/github.com/coreos/prometheus-operator
 COPY . .
 ENV GO111MODULE=on
 ENV GOFLAGS="-mod=vendor"
 RUN OS=$(go env GOOS) ARCH=$(go env GOARCH) make prometheus-admission-webhook-no-deps
 
-FROM registry.ci.openshift.org/ocp/4.15:base-rhel9
+FROM registry.ci.openshift.org/ocp/4.16:base-rhel9
 LABEL io.k8s.display-name="Prometheus admission webhook" \
       io.k8s.description="This component validates PrometheusRules and AlertManagerConfigs." \
       io.openshift.tags="prometheus" \