diff --git a/class/defaults.yml b/class/defaults.yml
index 350497af..669d80f9 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -118,4 +118,4 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: '1.28.4@sha256:9aa77d80cf5d32e0345c8468a45d39134a8016e30eccddaf720bf197ad7dd9f0'
+        tag: '1.28.6@sha256:76df698e7a7707f2c98b6346eb0b2d96eb9fe5be37786a40c2c9748d58e277e1'
diff --git a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
index 71a71175..e6a20b2b 100644
--- a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
+++ b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
@@ -72,7 +72,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.28.4@sha256:9aa77d80cf5d32e0345c8468a45d39134a8016e30eccddaf720bf197ad7dd9f0
+          image: docker.io/bitnami/kubectl:1.28.6@sha256:76df698e7a7707f2c98b6346eb0b2d96eb9fe5be37786a40c2c9748d58e277e1
           imagePullPolicy: IfNotPresent
           name: cleanup-old-clusterserviceversions
           ports: []