diff --git a/class/defaults.yml b/class/defaults.yml
index da3c66e..f6b210d 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -19,7 +19,7 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: "1.28.12"
+        tag: "1.28.13"
 
     storage:
       persistence: true
diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
index 50c4117..2673f5a 100644
--- a/tests/golden/oidc/oidc/oidc/10_cluster.yaml
+++ b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -605,7 +605,7 @@ spec:
               value: /export
             - name: VCLUSTER_SERVER_URL
               value: https://oidc:443
-          image: docker.io/bitnami/kubectl:1.28.12
+          image: docker.io/bitnami/kubectl:1.28.13
           imagePullPolicy: IfNotPresent
           name: oidc-synthesize
           ports: []
diff --git a/tests/golden/openshift/openshift/openshift/10_cluster.yaml b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
index aa82b76..afcd230 100644
--- a/tests/golden/openshift/openshift/openshift/10_cluster.yaml
+++ b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
@@ -703,7 +703,7 @@ spec:
               value: syn-openshift
             - name: VCLUSTER_STS_NAME
               value: openshift
-          image: docker.io/bitnami/kubectl:1.28.12
+          image: docker.io/bitnami/kubectl:1.28.13
           imagePullPolicy: IfNotPresent
           name: openshift
           ports: []