diff --git a/CHANGELOG.md b/CHANGELOG.md
index e4d15b0e..382ad7b3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,41 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.23.0
+
+**Release date:** 2022-04-05
+
+This prerelease adds some breaking changes around the use and handling of kubeconfigs 
+files for remote reconciliations. Implements health checks for kubernetes jobs and 
+updates documentation.
+
+SOPS implementation was refactored to include various improvements and extended code
+coverage. Age identities are now imported once and reused multiple times, optimising
+CPU and memory usage between decryption operations.
+
+**Breaking changes**:
+
+- Use of file-based KubeConfig options are now permanently disabled (e.g. 
+`TLSClientConfig.CAFile`, `TLSClientConfig.KeyFile`, `TLSClientConfig.CertFile`
+and `BearerTokenFile`). The drive behind the change was to discourage
+insecure practices of mounting Kubernetes tokens inside the controller's container file system.
+- Use of `TLSClientConfig.Insecure` in KubeConfig file is disabled by default,
+but can enabled at controller level with the flag `--insecure-kubeconfig-tls`.
+- Use of `ExecProvider` in KubeConfig file is now disabled by default,
+but can enabled at controller level with the flag `--insecure-kubeconfig-exec`.
+
+Improvements:
+- Add kubeconfig flags
+  [#593](https://github.com/fluxcd/kustomize-controller/pull/593)
+- sops: various improvements and tests
+  [#607](https://github.com/fluxcd/kustomize-controller/pull/607)
+- docs/spec/v1beta2: fix recommended settings typo
+  [#609](https://github.com/fluxcd/kustomize-controller/pull/609)
+- Implement health check for Kubernetes jobs
+  [#608](https://github.com/fluxcd/kustomize-controller/pull/608)
+- Update KubeConfig documentation
+  [#611](https://github.com/fluxcd/kustomize-controller/pull/611)
+
 ## 0.22.3
 
 **Release date:** 2022-03-29
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index 21eb40fd..5e88ad7a 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -5,4 +5,4 @@ resources:
 images:
   - name: fluxcd/kustomize-controller
     newName: fluxcd/kustomize-controller
-    newTag: v0.22.3
+    newTag: v0.23.0
diff --git a/go.mod b/go.mod
index e12dd69b..1a727af8 100644
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ require (
 	github.com/cyphar/filepath-securejoin v0.2.3
 	github.com/dimchansky/utfbom v1.1.1
 	github.com/drone/envsubst v1.0.3
-	github.com/fluxcd/kustomize-controller/api v0.22.3
+	github.com/fluxcd/kustomize-controller/api v0.23.0
 	github.com/fluxcd/pkg/apis/acl v0.0.3
 	github.com/fluxcd/pkg/apis/kustomize v0.3.2
 	github.com/fluxcd/pkg/apis/meta v0.12.1