diff --git a/class/defaults.yml b/class/defaults.yml
index ec85cbc..19e3aa8 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -17,7 +17,7 @@ parameters:
       agent:
         registry: ghcr.io
         repository: appuio/appuio-cloud-agent
-        tag: v0.11.0
+        tag: v0.12.0
 
     secrets: {}
 
diff --git a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_role.yaml b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_role.yaml
index fdf3add..b2be3dc 100644
--- a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_role.yaml
+++ b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_role.yaml
@@ -79,6 +79,18 @@ rules:
       - get
       - patch
       - update
+  - apiGroups:
+      - group.openshift.io
+    resources:
+      - users
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
diff --git a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml
index 649ec83..db94817 100644
--- a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml
+++ b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml
@@ -26,7 +26,7 @@ spec:
           command:
             - appuio-cloud-agent
           env: []
-          image: ghcr.io/appuio/appuio-cloud-agent:v0.11.0
+          image: ghcr.io/appuio/appuio-cloud-agent:v0.12.0
           livenessProbe:
             httpGet:
               path: /healthz