diff --git a/kubernetes/apps/default/opnsense/app/helmrelease.yaml b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
index cb651c39d..593adfb75 100644
--- a/kubernetes/apps/default/opnsense/app/helmrelease.yaml
+++ b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     restartPolicy: OnFailure
     image:
       repository: ghcr.io/auricom/kubectl
-      tag: 1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+      tag: 1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
     env:
       OPNSENSE_URL: "https://opnsense.${SECRET_DOMAIN}"
       S3_URL: "https://truenas.${SECRET_DOMAIN}:51515"
diff --git a/kubernetes/apps/default/qbittorrent/app/jobs/update-p2pblocklist.yaml b/kubernetes/apps/default/qbittorrent/app/jobs/update-p2pblocklist.yaml
index b9f7de899..a86a9555f 100644
--- a/kubernetes/apps/default/qbittorrent/app/jobs/update-p2pblocklist.yaml
+++ b/kubernetes/apps/default/qbittorrent/app/jobs/update-p2pblocklist.yaml
@@ -15,7 +15,7 @@ spec:
           serviceAccountName: jobs
           containers:
             - name: *app
-              image: ghcr.io/auricom/kubectl:1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+              image: ghcr.io/auricom/kubectl:1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
               imagePullPolicy: IfNotPresent
               command:
                 - "/bin/bash"
diff --git a/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml b/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
index b5084f9f5..8b4b78bf8 100644
--- a/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
+++ b/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     restartPolicy: OnFailure
     image:
       repository: ghcr.io/auricom/kubectl
-      tag: 1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+      tag: 1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
     command: ["/bin/bash", "/app/truenas-backup.sh"]
     env:
       HOSTNAME: truenas
@@ -65,7 +65,7 @@ spec:
     additionalContainers:
       truenas-remote-backup:
         name: truenas-remote-backup
-        image: ghcr.io/auricom/kubectl:1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+        image: ghcr.io/auricom/kubectl:1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
         command: ["/bin/bash", "/app/truenas-backup.sh"]
         env:
           - name: HOSTNAME
diff --git a/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml b/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
index 6c5aff399..dc730ea9a 100644
--- a/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
+++ b/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     restartPolicy: OnFailure
     image:
       repository: ghcr.io/auricom/kubectl
-      tag: 1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+      tag: 1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
     command: ["/bin/bash", "/app/truenas-certs-deploy.sh"]
     env:
       HOSTNAME: truenas
@@ -74,7 +74,7 @@ spec:
         readOnly: true
     sidecars:
       truenas-remote-certs-deploy:
-        image: ghcr.io/auricom/kubectl:1.28.2@sha256:3b2e697b7e9660ca55f4f6f5ab7b73d5d69b3333480df040cad9e4f23a5f1645
+        image: ghcr.io/auricom/kubectl:1.28.2@sha256:2b156325599d6f350bbf6c6a8093e296d298aeaa11e414207eeae5a1debf70ac
         command: ["/bin/bash", "/app/truenas-certs-deploy.sh"]
         env:
           - name: HOSTNAME