diff --git a/Makefile b/Makefile
index 3ea79fd9..56b0af1c 100644
--- a/Makefile
+++ b/Makefile
@@ -8,7 +8,7 @@ REGISTRY ?= $(REGISTRY_NAME).azurecr.io/$(REPO_PREFIX)
 LOCAL_REGISTRY_NAME ?= kind-registry
 LOCAL_REGISTRY_PORT ?= 5000
 IMAGE_NAME ?= keyvault
-IMAGE_VERSION ?= v0.0.11
+IMAGE_VERSION ?= v0.0.12
 IMAGE_TAG ?= $(REGISTRY)/$(IMAGE_NAME):$(IMAGE_VERSION)
 CGO_ENABLED_FLAG := 0
 
diff --git a/docs/manual-install.md b/docs/manual-install.md
index 03f34496..76902705 100644
--- a/docs/manual-install.md
+++ b/docs/manual-install.md
@@ -69,7 +69,7 @@ This guide demonstrates steps required to enable the KMS Plugin for Key Vault in
     hostNetwork: true
     containers:
       - name: azure-kms-provider
-        image: mcr.microsoft.com/oss/azure/kms/keyvault:v0.0.11
+        image: mcr.microsoft.com/oss/azure/kms/keyvault:v0.0.12
         imagePullPolicy: IfNotPresent
         args:
           - --listen-addr=unix:///opt/azurekms.socket             # [OPTIONAL] gRPC listen address. Default is unix:///opt/azurekms.socket
diff --git a/docs/rotation.md b/docs/rotation.md
index c706a654..64fb9d69 100644
--- a/docs/rotation.md
+++ b/docs/rotation.md
@@ -29,7 +29,7 @@ spec:
   hostNetwork: true
   containers:
     - name: azure-kms-provider
-      image: mcr.microsoft.com/oss/azure/kms/keyvault:v0.0.11
+      image: mcr.microsoft.com/oss/azure/kms/keyvault:v0.0.12
       imagePullPolicy: IfNotPresent
       args:
       - --listen-addr=unix:///opt/azurekms2.socket            # unix:///opt/azurekms.socket is used by the primary kms plugin pod. So use a different listen address here for the new kms plugin pod.