diff --git a/charts/kustomization/values.yaml b/charts/kustomization/values.yaml
index e7e26841..da125d00 100644
--- a/charts/kustomization/values.yaml
+++ b/charts/kustomization/values.yaml
@@ -6,7 +6,7 @@ image:
   repository: docker.io/alpine/k8s # https://github.com/alpine-docker/k8s
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: "1.26.0"
+  tag: "1.31.1"
 
 imagePullSecrets: []
 nameOverride: ""
diff --git a/rendered-manifests/addons/namespaces/monitoring/base/job.yaml b/rendered-manifests/addons/namespaces/monitoring/base/job.yaml
index 6ddf3f77..ecb67e72 100644
--- a/rendered-manifests/addons/namespaces/monitoring/base/job.yaml
+++ b/rendered-manifests/addons/namespaces/monitoring/base/job.yaml
@@ -131,7 +131,7 @@ spec:
               secretKeyRef:
                 key: admin-password
                 name: grafana-secret
-        image: "docker.io/alpine/k8s:1.26.0"
+        image: "docker.io/alpine/k8s:1.31.1"
         imagePullPolicy: Always
         name: kubectl
         securityContext:
diff --git a/rendered-manifests/core/namespaces/kube-system/base/patch-crds-finalizers.yaml b/rendered-manifests/core/namespaces/kube-system/base/patch-crds-finalizers.yaml
index 417c3345..d193a8bf 100644
--- a/rendered-manifests/core/namespaces/kube-system/base/patch-crds-finalizers.yaml
+++ b/rendered-manifests/core/namespaces/kube-system/base/patch-crds-finalizers.yaml
@@ -99,7 +99,7 @@ spec:
                     done
                   fi
                 EOF
-              image: docker.io/alpine/k8s:1.25.4
+              image: docker.io/alpine/k8s:1.31.1
               imagePullPolicy: IfNotPresent
               securityContext:
                 runAsNonRoot: false