diff --git a/class/defaults.yml b/class/defaults.yml
index 962664d1..cc77c728 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -237,7 +237,7 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: '1.26.10@sha256:056c0c09241d5c6ae97ff782ebee9e1cc73363583ff93067679702c72e11c77a'
+        tag: '1.28.3@sha256:1364cda0798b2c44f327265397fbd34a32e66d80328d6e50a2d10377d7e2ff6d'
 
     charts:
       # We do not support helm chart versions older than v1.7.0
diff --git a/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml b/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
index bf8817a9..53c72777 100644
--- a/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
+++ b/tests/golden/defaults/rook-ceph/rook-ceph/99_cleanup.yaml
@@ -86,7 +86,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.26.10@sha256:056c0c09241d5c6ae97ff782ebee9e1cc73363583ff93067679702c72e11c77a
+          image: docker.io/bitnami/kubectl:1.28.3@sha256:1364cda0798b2c44f327265397fbd34a32e66d80328d6e50a2d10377d7e2ff6d
           imagePullPolicy: IfNotPresent
           name: cleanup-alertrules
           ports: []
diff --git a/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml b/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
index bf8817a9..53c72777 100644
--- a/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
+++ b/tests/golden/openshift4/rook-ceph/rook-ceph/99_cleanup.yaml
@@ -86,7 +86,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.26.10@sha256:056c0c09241d5c6ae97ff782ebee9e1cc73363583ff93067679702c72e11c77a
+          image: docker.io/bitnami/kubectl:1.28.3@sha256:1364cda0798b2c44f327265397fbd34a32e66d80328d6e50a2d10377d7e2ff6d
           imagePullPolicy: IfNotPresent
           name: cleanup-alertrules
           ports: []