diff --git a/cluster/core/networking/secret-reflector/cron-job.yaml b/cluster/core/networking/secret-reflector/cron-job.yaml
index 21f89393f..e577485a4 100644
--- a/cluster/core/networking/secret-reflector/cron-job.yaml
+++ b/cluster/core/networking/secret-reflector/cron-job.yaml
@@ -63,7 +63,7 @@ spec:
           containers:
             - name: secret-reflector
               # image: ghcr.io/k8s-at-home/kubectl:v1.22.1
-              image: alpine/k8s:1.25.2
+              image: alpine/k8s:1.28.3
               env:
                 - name: SECRETS
                   value: "${SECRET_DOMAIN//./-}-tls"
@@ -77,7 +77,7 @@ spec:
                   readOnly: true
             - name: configmap-reflector
               # image: ghcr.io/k8s-at-home/kubectl:v1.22.1
-              image: alpine/k8s:1.25.2
+              image: alpine/k8s:1.28.3
               env:
                 - name: CONFIGMAPS
                   value: "none"
diff --git a/cluster/core/storage/rook-ceph-internal/reflector/cron-job.yaml b/cluster/core/storage/rook-ceph-internal/reflector/cron-job.yaml
index 9fe046cc3..84fbd53e0 100644
--- a/cluster/core/storage/rook-ceph-internal/reflector/cron-job.yaml
+++ b/cluster/core/storage/rook-ceph-internal/reflector/cron-job.yaml
@@ -20,7 +20,7 @@ spec:
           containers:
             - name: secret-reflector
               # image: ghcr.io/k8s-at-home/kubectl:v1.22.1
-              image: alpine/k8s:1.25.2
+              image: alpine/k8s:1.28.3
               env:
                 - name: SECRETS
                   value: "rook-ceph-mon"
@@ -34,7 +34,7 @@ spec:
                   readOnly: true
             - name: configmap-reflector
               # image: ghcr.io/k8s-at-home/kubectl:v1.22.1
-              image: alpine/k8s:1.25.2
+              image: alpine/k8s:1.28.3
               env:
                 - name: CONFIGMAPS
                   value: "rook-ceph-mon-endpoints"