diff --git a/kubernetes/apps/default/opnsense/app/helmrelease.yaml b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
index 01d8baa8a..aaed09327 100644
--- a/kubernetes/apps/default/opnsense/app/helmrelease.yaml
+++ b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     restartPolicy: OnFailure
     image:
       repository: ghcr.io/onedr0p/kubernetes-kubectl
-      tag: 1.28.1@sha256:e2d3f49bcda7824cb182da0c79aa65596d5d3be2cc77512d0ddb5458cf3f2413
+      tag: 1.28.2@sha256:ec27da3d60e4979e53dcf1a5f36656623b3488c7aa0d88112b0978cce09f43ad
     command: ["/bin/bash", "/app/opnsense-backup.sh"]
     env:
       OPNSENSE_URL: "https://opnsense.${SECRET_DOMAIN}"