diff --git a/class/defaults.yml b/class/defaults.yml
index 716519e..9aaa62c 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -7,7 +7,7 @@ parameters:
       kubectl:
         registry: docker.io
         repository: bitnami/kubectl
-        tag: 1.25.15
+        tag: 1.31.2
 
     # Fixes cluster upgrades on OCP4.10 clusters with custom `privileged` SCCs.
     clusterUpgradeSCCPermissionFix:
diff --git a/tests/golden/pull-secret/openshift4-config/openshift4-config/99_cluster_pull_secret.yaml b/tests/golden/pull-secret/openshift4-config/openshift4-config/99_cluster_pull_secret.yaml
index af31b08..7c18607 100644
--- a/tests/golden/pull-secret/openshift4-config/openshift4-config/99_cluster_pull_secret.yaml
+++ b/tests/golden/pull-secret/openshift4-config/openshift4-config/99_cluster_pull_secret.yaml
@@ -70,7 +70,7 @@ spec:
             - kubectl label secret pull-secret argocd.argoproj.io/instance-;kubectl
               annotate secret pull-secret kubectl.kubernetes.io/last-applied-configuration-;kubectl
               annotate secret pull-secret argocd.argoproj.io/sync-options-;
-          image: docker.io/bitnami/kubectl:1.25.15
+          image: docker.io/bitnami/kubectl:1.31.2
           name: clean
       imagePullSecrets: []
       initContainers: []
@@ -126,7 +126,7 @@ spec:
           command:
             - /script/sync-secret.sh
           env: []
-          image: docker.io/bitnami/kubectl:1.25.15
+          image: docker.io/bitnami/kubectl:1.31.2
           imagePullPolicy: IfNotPresent
           name: update
           ports: []