diff --git a/roles/crio/defaults/main.yaml b/roles/crio/defaults/main.yaml
index 25effcd..e5f3fff 100644
--- a/roles/crio/defaults/main.yaml
+++ b/roles/crio/defaults/main.yaml
@@ -1 +1 @@
-crio_version: "1.26"
+crio_version: "1.28"
diff --git a/roles/kubernetes/defaults/main.yaml b/roles/kubernetes/defaults/main.yaml
index d36a2d3..bac5bad 100644
--- a/roles/kubernetes/defaults/main.yaml
+++ b/roles/kubernetes/defaults/main.yaml
@@ -1,9 +1,9 @@
 ---
 kubernetes_packages:
-  - kubelet=1.27.4-00
-  - kubeadm=1.27.4-00
-  - kubectl=1.27.4-00
-  - kubernetes-cni=1.2.0-00
+  - kubelet=1.29.0-1.1
+  - kubeadm=1.29.0-1.1
+  - kubectl=1.29.0-1.1
+  - kubernetes-cni=1.3.0-1.1
 
 kubernetes_other_packages:
   - ipset  # needed for ipvs
diff --git a/roles/kubernetes/tasks/main.yaml b/roles/kubernetes/tasks/main.yaml
index f920e08..5f6e3a1 100644
--- a/roles/kubernetes/tasks/main.yaml
+++ b/roles/kubernetes/tasks/main.yaml
@@ -12,12 +12,13 @@
 
 - name: Install Google Cloud Packages Automatic Signing Key
   ansible.builtin.apt_key:
-    url: 'https://packages.cloud.google.com/apt/doc/apt-key.gpg'
+    url: 'https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key'
+    keyring: /etc/apt/keyrings/kubernetes-apt-keyring.gpg
     state: present
 
 - name: Install Kubernetes apt repo
   ansible.builtin.apt_repository:
-    repo: 'deb http://apt.kubernetes.io/ kubernetes-xenial main'
+    repo: 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /'
     filename: kubernetes
     state: present
     update_cache: true