diff --git a/cluster/cluster.yaml b/cluster/cluster.yaml
index 324deacbd6..570b3919b3 100644
--- a/cluster/cluster.yaml
+++ b/cluster/cluster.yaml
@@ -63,7 +63,7 @@ Resources:
       Subnets:
   {{ with $values := .Values }}
   {{ range $az := $values.availability_zones }}
-        - "{{ index $values.subnets $az }}"
+        - "{{ index $values.lb_subnets $az }}"
   {{ end }}
   {{ end }}
       Tags:
@@ -1767,6 +1767,9 @@ Resources:
               - Action: 'kinesis:Describe*'
                 Effect: Allow
                 Resource: '*'
+              - Action: 'kinesisanalytics:List*'
+                Effect: Allow
+                Resource: '*'
               - Action: 'lambda:List*'
                 Effect: Allow
                 Resource: '*'
diff --git a/cluster/manifests/02-kube-aws-iam-controller/deployment.yaml b/cluster/manifests/02-kube-aws-iam-controller/deployment.yaml
index 5ab787b753..b7d7d3ff23 100644
--- a/cluster/manifests/02-kube-aws-iam-controller/deployment.yaml
+++ b/cluster/manifests/02-kube-aws-iam-controller/deployment.yaml
@@ -27,7 +27,7 @@ spec:
       hostNetwork: true
       containers:
       - name: kube-aws-iam-controller
-        image: container-registry.zalando.net/teapot/kube-aws-iam-controller:v0.3.0-43-gf1c8bd8
+        image: container-registry.zalando.net/teapot/kube-aws-iam-controller:v0.3.0-45-gf22c994
         env:
         - name: AWS_DEFAULT_REGION
           value: "{{.Cluster.Region}}"
diff --git a/cluster/manifests/aws-cloud-controller-manager/daemonset.yaml b/cluster/manifests/aws-cloud-controller-manager/daemonset.yaml
index 0f7b8869d8..04f3390f99 100644
--- a/cluster/manifests/aws-cloud-controller-manager/daemonset.yaml
+++ b/cluster/manifests/aws-cloud-controller-manager/daemonset.yaml
@@ -27,7 +27,7 @@ spec:
         - --cloud-provider=aws
         - --use-service-account-credentials=true
         - --configure-cloud-routes=false
-        image: container-registry.zalando.net/teapot/aws-cloud-controller-manager-internal:v1.31.1-master-131
+        image: container-registry.zalando.net/teapot/aws-cloud-controller-manager-internal:v1.31.1-master-132
         name: aws-cloud-controller-manager
         resources:
           requests:
diff --git a/cluster/manifests/deployment-service/controller-statefulset.yaml b/cluster/manifests/deployment-service/controller-statefulset.yaml
index 48456ea4a8..a1b0163c64 100644
--- a/cluster/manifests/deployment-service/controller-statefulset.yaml
+++ b/cluster/manifests/deployment-service/controller-statefulset.yaml
@@ -29,7 +29,7 @@ spec:
       terminationGracePeriodSeconds: 300
       containers:
         - name: "deployment-service-controller"
-          image: "container-registry.zalando.net/teapot/deployment-controller:master-226"
+          image: "container-registry.zalando.net/teapot/deployment-controller:master-229"
           args:
             - "--config-namespace=kube-system"
             - "--decrypt-kms-alias-arn=arn:aws:kms:{{ .Cluster.Region }}:{{ .Cluster.InfrastructureAccount | getAWSAccountID }}:alias/deployment-secret"
diff --git a/cluster/manifests/deployment-service/status-service-deployment.yaml b/cluster/manifests/deployment-service/status-service-deployment.yaml
index 1ed9d2e052..e21672d05f 100644
--- a/cluster/manifests/deployment-service/status-service-deployment.yaml
+++ b/cluster/manifests/deployment-service/status-service-deployment.yaml
@@ -1,4 +1,4 @@
-# {{ $image   := "container-registry.zalando.net/teapot/deployment-status-service:master-226" }}
+# {{ $image   := "container-registry.zalando.net/teapot/deployment-status-service:master-229" }}
 # {{ $version := index (split $image ":") 1 }}
 
 apiVersion: apps/v1
diff --git a/cluster/manifests/flannel/daemonset.yaml b/cluster/manifests/flannel/daemonset.yaml
index 06c2c7afec..a5f9ca0525 100644
--- a/cluster/manifests/flannel/daemonset.yaml
+++ b/cluster/manifests/flannel/daemonset.yaml
@@ -57,7 +57,7 @@ spec:
           failureThreshold: 30
           periodSeconds: 10
       - name: kube-flannel
-        image: container-registry.zalando.net/teapot/flannel:v0.25.7-master-30
+        image: container-registry.zalando.net/teapot/flannel:v0.26.0-master-31
         command:
         - /opt/bin/flanneld
         args:
diff --git a/cluster/manifests/kube-metrics-adapter/deployment.yaml b/cluster/manifests/kube-metrics-adapter/deployment.yaml
index 6710099818..193d0c0b0f 100644
--- a/cluster/manifests/kube-metrics-adapter/deployment.yaml
+++ b/cluster/manifests/kube-metrics-adapter/deployment.yaml
@@ -27,7 +27,7 @@ spec:
       serviceAccountName: custom-metrics-apiserver
       containers:
       - name: kube-metrics-adapter
-        image: container-registry.zalando.net/teapot/kube-metrics-adapter:kube-metrics-adapter-0.2.3-30-g68fcf9b
+        image: container-registry.zalando.net/teapot/kube-metrics-adapter:kube-metrics-adapter-0.2.3-31-g9ff49a9
         env:
         - name: AWS_REGION
           value: {{ .Cluster.Region }}
diff --git a/cluster/manifests/kubenurse/prometheus.yaml b/cluster/manifests/kubenurse/prometheus.yaml
index c608d2dc83..aabbc22599 100644
--- a/cluster/manifests/kubenurse/prometheus.yaml
+++ b/cluster/manifests/kubenurse/prometheus.yaml
@@ -37,7 +37,7 @@ spec:
           value: "1"
       containers:
       - name: prometheus
-        image: container-registry.zalando.net/teapot/prometheus:v2.54.1-master-58
+        image: container-registry.zalando.net/teapot/prometheus:v2.55.0-master-59
         args:
         - "--config.file=/etc/prometheus/prometheus.yml"
         - "--storage.tsdb.path=/prometheus/"