diff --git a/class/defaults.yml b/class/defaults.yml
index e4c5514..048327f 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -19,7 +19,7 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: "1.26.3"
+        tag: "1.28.4"
 
     storage:
       persistence: true
diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
index d39456b..f5cc195 100644
--- a/tests/golden/oidc/oidc/oidc/10_cluster.yaml
+++ b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -604,7 +604,7 @@ spec:
               value: /export
             - name: VCLUSTER_SERVER_URL
               value: https://oidc:443
-          image: docker.io/bitnami/kubectl:1.26.3
+          image: docker.io/bitnami/kubectl:1.28.4
           imagePullPolicy: IfNotPresent
           name: oidc-synthesize
           ports: []
diff --git a/tests/golden/openshift/openshift/openshift/10_cluster.yaml b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
index 6a5deb3..ca55b18 100644
--- a/tests/golden/openshift/openshift/openshift/10_cluster.yaml
+++ b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
@@ -665,7 +665,7 @@ spec:
               value: syn-openshift
             - name: VCLUSTER_STS_NAME
               value: openshift
-          image: docker.io/bitnami/kubectl:1.26.3
+          image: docker.io/bitnami/kubectl:1.28.4
           imagePullPolicy: IfNotPresent
           name: openshift
           ports: []