diff --git a/Dockerfile b/Dockerfile
index b9cd9891480990e0e1904f65b476072c8670b5dc..d80f03a2618ef823b139dbc02ca0378de99fd4dd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -62,7 +62,7 @@ RUN curl -Lo flux_install.sh https://fluxcd.io/install.sh && \
 # ------------------
 # Install kubeseal
 # ------------------
-ARG KUBESEAL_VERSION=0.20.5
+ARG KUBESEAL_VERSION=0.26.2
 
 RUN curl -Lo kubeseal-${KUBESEAL_VERSION}-linux-amd64.tar.gz \
     https://github.com/bitnami-labs/sealed-secrets/releases/download/v${KUBESEAL_VERSION}/kubeseal-${KUBESEAL_VERSION}-linux-amd64.tar.gz && \
@@ -103,7 +103,7 @@ RUN curl -sLO "https://github.com/starship/starship/releases/latest/download/sta
 # ------------------
 # Install base
 # ------------------
-FROM ubuntu:latest
+FROM ubuntu:jammy
 
 COPY entrypoint.sh /
 
@@ -115,15 +115,15 @@ COPY requirements.txt /tmp
 RUN apt-get clean && apt-get update && apt-get install -y curl unzip locales sshpass git jq vim sudo apt-transport-https \
     dnsutils inetutils-traceroute inetutils-ping netcat wget\
     ca-certificates uuid-runtime openconnect python3 python3-pkg-resources python3-distutils python3-pip tmux zsh zsh-autosuggestions && \
-    curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor | tee /etc/apt/trusted.gpg.d/kubernetes.gpg 1> /dev/null && \
-    echo "deb https://apt.kubernetes.io/ kubernetes-xenial main" | tee /etc/apt/sources.list.d/kubernetes.list && \
+    curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg 1> /dev/null && \
+    echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /" | tee /etc/apt/sources.list.d/kubernetes.list && \
     curl https://baltocdn.com/helm/signing.asc | gpg --dearmor | tee /etc/apt/trusted.gpg.d/helm.gpg 1> /dev/null && \
     echo "deb https://baltocdn.com/helm/stable/debian/ all main" | tee /etc/apt/sources.list.d/helm-stable-debian.list && \
     curl https://proget.makedeb.org/debian-feeds/prebuilt-mpr.pub | gpg --dearmor | tee /etc/apt/trusted.gpg.d/prebuilt-mpr-archive-keyring.gpg 1> /dev/null && \
     echo "deb https://proget.makedeb.org prebuilt-mpr jammy" | tee /etc/apt/sources.list.d/prebuilt-mpr.list && \
     curl https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | tee /etc/apt/trusted.gpg.d/trivy.gpg 1> /dev/null && \
     echo "deb https://aquasecurity.github.io/trivy-repo/deb jammy main" | tee -a /etc/apt/sources.list.d/trivy.list && \
-    apt-get clean && apt-get update && apt-get install -y kubectl=1.27.6-00 \
+    apt-get clean && apt-get update && apt-get install -y kubectl=1.28.9-2.1 \
     git jq ca-certificates vim sudo uuid-runtime openconnect python3 python3-pkg-resources python3-distutils python3-pip \
     curl unzip locales sshpass silversearcher-ag helm glab trivy pinentry-tty bash-completion && \
     pip3 install -r /tmp/requirements.txt && \