diff --git a/resources/static-manifests/kube-apiserver.yaml b/resources/static-manifests/kube-apiserver.yaml
index 833357d..fd69713 100644
--- a/resources/static-manifests/kube-apiserver.yaml
+++ b/resources/static-manifests/kube-apiserver.yaml
@@ -30,9 +30,11 @@ spec:
     - --etcd-certfile=/etc/kubernetes/pki/etcd-client.crt
     - --etcd-keyfile=/etc/kubernetes/pki/etcd-client.key
     - --etcd-servers=${etcd_servers}
+    - --feature-gates=kube:MutatingAdmissionPolicy=true
     - --kubelet-client-certificate=/etc/kubernetes/pki/apiserver.crt
     - --kubelet-client-key=/etc/kubernetes/pki/apiserver.key
     - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname${aggregation_flags}
+    - --runtime-config=admissionregistration.k8s.io/v1alpha1=true
     - --secure-port=6443
     - --service-account-issuer=https://kubernetes.default.svc.cluster.local
     - --service-account-jwks-uri=https://kubernetes.default.svc.cluster.local/openid/v1/jwks
diff --git a/variables.tf b/variables.tf
index e91353e..5219c24 100644
--- a/variables.tf
+++ b/variables.tf
@@ -46,13 +46,13 @@ variable "container_images" {
   default = {
     cilium_agent            = "quay.io/cilium/cilium:v1.16.5"
     cilium_operator         = "quay.io/cilium/operator-generic:v1.16.5"
-    coredns                 = "registry.k8s.io/coredns/coredns:v1.11.4"
-    flannel                 = "docker.io/flannel/flannel:v0.26.2"
+    coredns                 = "registry.k8s.io/coredns/coredns:v1.12.0"
+    flannel                 = "docker.io/flannel/flannel:v0.26.3"
     flannel_cni             = "quay.io/poseidon/flannel-cni:v0.4.2"
-    kube_apiserver          = "registry.k8s.io/kube-apiserver:v1.32.0"
-    kube_controller_manager = "registry.k8s.io/kube-controller-manager:v1.32.0"
-    kube_scheduler          = "registry.k8s.io/kube-scheduler:v1.32.0"
-    kube_proxy              = "registry.k8s.io/kube-proxy:v1.32.0"
+    kube_apiserver          = "registry.k8s.io/kube-apiserver:v1.32.1"
+    kube_controller_manager = "registry.k8s.io/kube-controller-manager:v1.32.1"
+    kube_scheduler          = "registry.k8s.io/kube-scheduler:v1.32.1"
+    kube_proxy              = "registry.k8s.io/kube-proxy:v1.32.1"
   }
 }