diff --git a/class/defaults.yml b/class/defaults.yml
index c787961f..e29bf4ea 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -237,7 +237,7 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: '1.25.5@sha256:19dff0248157ae4cd320097ace1b5e0ffbb8bc7c7ea7fa3f13f73993fc6d7ee2'
+        tag: '1.28.2@sha256:8886b1538fb6fe6e2fe4cb1352bdfd419c63a9bc8152daac38c9917bd2fb1d3e'
 
     charts:
       # We do not support helm chart versions older than v1.7.0
diff --git a/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml b/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
index 8ed4050d..04826ffe 100644
--- a/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
+++ b/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
@@ -86,7 +86,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.25.5@sha256:19dff0248157ae4cd320097ace1b5e0ffbb8bc7c7ea7fa3f13f73993fc6d7ee2
+          image: docker.io/bitnami/kubectl:1.28.2@sha256:8886b1538fb6fe6e2fe4cb1352bdfd419c63a9bc8152daac38c9917bd2fb1d3e
           imagePullPolicy: IfNotPresent
           name: cleanup-alertrules
           ports: []
diff --git a/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml b/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
index 8ed4050d..04826ffe 100644
--- a/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
+++ b/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
@@ -86,7 +86,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.25.5@sha256:19dff0248157ae4cd320097ace1b5e0ffbb8bc7c7ea7fa3f13f73993fc6d7ee2
+          image: docker.io/bitnami/kubectl:1.28.2@sha256:8886b1538fb6fe6e2fe4cb1352bdfd419c63a9bc8152daac38c9917bd2fb1d3e
           imagePullPolicy: IfNotPresent
           name: cleanup-alertrules
           ports: []