diff --git a/ansible/inventory/group_vars/kubernetes/k3s.yml b/ansible/inventory/group_vars/kubernetes/k3s.yml
index e1f486e7..a588f5af 100644
--- a/ansible/inventory/group_vars/kubernetes/k3s.yml
+++ b/ansible/inventory/group_vars/kubernetes/k3s.yml
@@ -5,7 +5,7 @@
 #
 
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.27.3+k3s1"
+k3s_release_version: "v1.28.3+k3s1"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_debug: false
diff --git a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
index 061b97ad..192774c5 100644
--- a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
+++ b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.27.3+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   nodeSelector:
diff --git a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
index bc73a508..c2487887 100644
--- a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
+++ b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.27.3+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true