diff --git a/class/defaults.yml b/class/defaults.yml
index 65a58098..e9bc0297 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -112,4 +112,4 @@ parameters:
       kubectl:
         registry: docker.io
         image: bitnami/kubectl
-        tag: '1.28.4@sha256:9aa77d80cf5d32e0345c8468a45d39134a8016e30eccddaf720bf197ad7dd9f0'
+        tag: '1.28.6@sha256:6549d3fe326a1e5eea09e2caf154231682f67c5e3b901649b428dc4c6a5808d0'
diff --git a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
index 71a71175..a1c835a3 100644
--- a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
+++ b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
@@ -72,7 +72,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: docker.io/bitnami/kubectl:1.28.4@sha256:9aa77d80cf5d32e0345c8468a45d39134a8016e30eccddaf720bf197ad7dd9f0
+          image: docker.io/bitnami/kubectl:1.28.6@sha256:6549d3fe326a1e5eea09e2caf154231682f67c5e3b901649b428dc4c6a5808d0
           imagePullPolicy: IfNotPresent
           name: cleanup-old-clusterserviceversions
           ports: []