diff --git a/kubernetes/apps/default/opnsense/app/helmrelease.yaml b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
index ee170da8c..01d8baa8a 100644
--- a/kubernetes/apps/default/opnsense/app/helmrelease.yaml
+++ b/kubernetes/apps/default/opnsense/app/helmrelease.yaml
@@ -35,7 +35,7 @@ spec:
     restartPolicy: OnFailure
     image:
       repository: ghcr.io/onedr0p/kubernetes-kubectl
-      tag: 1.27.4@sha256:00a2d149524ec73f877e66032378209c6d8b700c78f371a3f0d4feed39008689
+      tag: 1.28.1@sha256:e2d3f49bcda7824cb182da0c79aa65596d5d3be2cc77512d0ddb5458cf3f2413
     command: ["/bin/bash", "/app/opnsense-backup.sh"]
     env:
       OPNSENSE_URL: "https://opnsense.${SECRET_DOMAIN}"