diff --git a/kubernetes/apps/default/opnsense/app/helmrelease.yaml b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
index efa17e47e..f099b06ae 100644
--- a/kubernetes/apps/default/opnsense/app/helmrelease.yaml
+++ b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
           main:
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             env:
               OPNSENSE_URL: "https://opnsense.${SECRET_DOMAIN}"
               S3_URL: "https://truenas.${SECRET_DOMAIN}:51515"
diff --git a/kubernetes/apps/default/qbittorrent/app/upgrade-p2pblocklist/helmrelease.yaml b/kubernetes/apps/default/qbittorrent/app/upgrade-p2pblocklist/helmrelease.yaml
index 30570d184..a977ec642 100644
--- a/kubernetes/apps/default/qbittorrent/app/upgrade-p2pblocklist/helmrelease.yaml
+++ b/kubernetes/apps/default/qbittorrent/app/upgrade-p2pblocklist/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
           main:
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             command:
               - "/bin/bash"
               - "-c"
diff --git a/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml b/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
index 6c0ee773b..c50b13f44 100644
--- a/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
+++ b/kubernetes/apps/default/truenas/app/backup/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
           main:
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             command: ["/bin/bash", "/app/truenas-backup.sh"]
             env:
               HOSTNAME: truenas
@@ -48,7 +48,7 @@ spec:
             name: truenas-remote-backup
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             command: ["/bin/bash", "/app/truenas-backup.sh"]
             env:
               HOSTNAME: truenas-remote
diff --git a/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml b/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
index a8289008a..117a218ac 100644
--- a/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
+++ b/kubernetes/apps/default/truenas/app/certs-deploy/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
           main:
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             command: ["/bin/bash", "/app/truenas-certs-deploy.sh"]
             env:
               HOSTNAME: truenas
@@ -49,7 +49,7 @@ spec:
           truenas-remote-certs-deploy:
             image:
               repository: ghcr.io/auricom/kubectl
-              tag: 1.28.2@sha256:c501dc41a29b62346cc791b83e1f0d6755dcc1776b89d506f4c4a8e3fb63be41
+              tag: 1.28.3@sha256:536e3a2a8222d56637208c207a5b77a7d656175a29b899383d5a1bb1d1e48438
             command: ["/bin/bash", "/app/truenas-certs-deploy.sh"]
             env:
               HOSTNAME: truenas-remote