diff --git a/hack/build-image/Dockerfile b/hack/build-image/Dockerfile
index 71bd253ecd..abf1259e8d 100644
--- a/hack/build-image/Dockerfile
+++ b/hack/build-image/Dockerfile
@@ -21,16 +21,16 @@ ENV GO111MODULE=on
 ENV GOPROXY=${GOPROXY}
 
 # kubebuilder test bundle is separated from kubebuilder. Need to setup it for CI test.
-RUN curl -sSLo envtest-bins.tar.gz https://go.kubebuilder.io/test-tools/1.22.1/linux/$(go env GOARCH) && \
+RUN curl -sSLo envtest-bins.tar.gz https://go.kubebuilder.io/test-tools/1.28.3/linux/$(go env GOARCH) && \
     mkdir /usr/local/kubebuilder && \
     tar -C /usr/local/kubebuilder --strip-components=1 -zvxf envtest-bins.tar.gz
 
-RUN wget --quiet https://github.com/kubernetes-sigs/kubebuilder/releases/download/v3.2.0/kubebuilder_linux_$(go env GOARCH) && \
+RUN wget --quiet https://github.com/kubernetes-sigs/kubebuilder/releases/download/v3.13.0/kubebuilder_linux_$(go env GOARCH) && \
     mv kubebuilder_linux_$(go env GOARCH) /usr/local/kubebuilder/bin/kubebuilder && \
     chmod +x /usr/local/kubebuilder/bin/kubebuilder
 
 # get controller-tools
-RUN go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.12.0
+RUN go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.14.0
 
 # get goimports (the revision is pinned so we don't indiscriminately update, but the particular commit
 # is not important)
diff --git a/hack/update-3generated-crd-code.sh b/hack/update-3generated-crd-code.sh
index 6bd185cc3f..ae254c9c97 100755
--- a/hack/update-3generated-crd-code.sh
+++ b/hack/update-3generated-crd-code.sh
@@ -33,7 +33,7 @@ fi
 # get code-generation tools (for now keep in GOPATH since they're not fully modules-compatible yet)
 mkdir -p ${GOPATH}/src/k8s.io
 pushd ${GOPATH}/src/k8s.io
-git clone -b v0.22.2 https://github.com/kubernetes/code-generator
+git clone -b v0.28.8 https://github.com/kubernetes/code-generator
 popd
 
 ${GOPATH}/src/k8s.io/code-generator/generate-groups.sh \