diff --git a/k8s-tools/Dockerfile b/k8s-tools/Dockerfile
index a4e6c527..165a29ef 100644
--- a/k8s-tools/Dockerfile
+++ b/k8s-tools/Dockerfile
@@ -49,7 +49,7 @@ RUN echo "Computed sha256sum: $(sha256sum ${KAPP_FILENAME})" \
     && mv kapp-linux-amd64 kapp
 
 # renovate: datasource=github-tags depName=kubernetes/kubectl
-ENV KUBECTL_VERSION 1.24.13
+ENV KUBECTL_VERSION 1.27.2
 ENV KUBECTL_SUM 52455fe485fa11c650ab07fea2e4856b5ea5a3e6ef8a1b3b6121e6361437fff9
 ENV KUBECTL_FILENAME kubectl
 ADD https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl .
diff --git a/k8s-tools/k8s-tools_spec.rb b/k8s-tools/k8s-tools_spec.rb
index d5f6d06a..c9a59c6e 100644
--- a/k8s-tools/k8s-tools_spec.rb
+++ b/k8s-tools/k8s-tools_spec.rb
@@ -7,7 +7,7 @@
 CREDHUB_CLI_VERSION='2.9.1' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 KUSTOMIZE_VERSION="4.5.4" # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
 KAPP_VERSION="0.46.0" # renovate: datasource=github-releases depName=k14s/kapp
-KUBECTL_VERSION="1.24.13" # renovate: datasource=github-tags depName=kubernetes/kubectl
+KUBECTL_VERSION="1.27.2" # renovate: datasource=github-tags depName=kubernetes/kubectl
 HELM_VERSION="3.12.0" # renovate: datasource=github-releases depName=helm/helm
 KUTTL_VERSION="0.15.0" # renovate: datasource=github-releases depName=kudobuilder/kuttl