diff --git a/Makefile b/Makefile
index 2df1f6301..f958b34e3 100644
--- a/Makefile
+++ b/Makefile
@@ -2,7 +2,7 @@
 MAKEFILE_PATH = $(dir $(realpath -s $(firstword $(MAKEFILE_LIST))))
 
 # Image URL to use all building/pushing image targets
-IMG ?= amazon/aws-alb-ingress-controller:v2.2.1
+IMG ?= amazon/aws-alb-ingress-controller:v2.3.0
 
 CRD_OPTIONS ?= "crd:crdVersions=v1"
 
@@ -101,7 +101,7 @@ docs-preview: docs-dependencies
 
 # publish the versioned docs using mkdocs mike util
 docs-publish: docs-dependencies
-	pipenv run mike deploy v2.2 latest -p --update-aliases
+	pipenv run mike deploy v2.3 latest -p --update-aliases
 
 # install dependencies needed to preview and publish docs
 docs-dependencies:
diff --git a/config/controller/kustomization.yaml b/config/controller/kustomization.yaml
index 57b0d69b9..fab1042ff 100644
--- a/config/controller/kustomization.yaml
+++ b/config/controller/kustomization.yaml
@@ -9,4 +9,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: amazon/aws-alb-ingress-controller
-  newTag: v2.2.1
+  newTag: v2.3.0
diff --git a/config/default/kustomization.yaml b/config/default/kustomization.yaml
index c222b5b09..9f7cbfe99 100644
--- a/config/default/kustomization.yaml
+++ b/config/default/kustomization.yaml
@@ -41,7 +41,7 @@ vars:
     objref:
       kind: Certificate
       group: cert-manager.io
-      version: v1alpha2
+      version: v1
       name: serving-cert # this name should match the one in certificate.yaml
     fieldref:
       fieldpath: metadata.namespace
@@ -49,7 +49,7 @@ vars:
     objref:
       kind: Certificate
       group: cert-manager.io
-      version: v1alpha2
+      version: v1
       name: serving-cert # this name should match the one in certificate.yaml
   - name: SERVICE_NAMESPACE # namespace of the service
     objref:
diff --git a/docs/deploy/installation.md b/docs/deploy/installation.md
index 8cafdddb9..312f47c3d 100644
--- a/docs/deploy/installation.md
+++ b/docs/deploy/installation.md
@@ -75,7 +75,7 @@ The IAM permissions can either be setup via IAM roles for ServiceAccount or can
 
 1. Download IAM policy for the AWS Load Balancer Controller
     ```
-    curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.2.1/docs/install/iam_policy.json
+    curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.3.0/docs/install/iam_policy.json
     ```
 
 1. Create an IAM policy called AWSLoadBalancerControllerIAMPolicy
@@ -150,7 +150,7 @@ curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-lo
     ### Apply YAML
     1. Download spec for load balancer controller. 
     ```
-    wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.2.1/docs/install/v2_2_1_full.yaml
+    wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.3.0/v2_3_0_full.yaml
     ```
     1. Edit the saved yaml file, go to the Deployment spec, and set the controller --cluster-name arg value to your EKS cluster name
     ```
@@ -174,7 +174,7 @@ curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-lo
     ```
     1. Apply the yaml file 
     ```
-    kubectl apply -f v2_2_1_full.yaml
+    kubectl apply -f v2_3_0_full.yaml
     ```