diff --git a/Dockerfile b/Dockerfile
index e72f1c5..ec31090 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,13 +4,15 @@ COPY . /app
 RUN cargo build --release
 
 FROM ghcr.io/tweedegolf/debian:bookworm
+
 # install kubectl
-RUN curl -s -L https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add - \
-    && echo "deb http://packages.cloud.google.com/apt cloud-sdk-stretch main" > /etc/apt/sources.list.d/google-cloud-sdk.list \
+RUN curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg \
+    && echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] http://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list \
     && apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         kubectl \
     && rm -rf /var/lib/apt/lists/*
+
 # install age
 ENV AGE_VERSION=1.1.1
 RUN curl -s -L https://github.com/FiloSottile/age/releases/download/v${AGE_VERSION}/age-v${AGE_VERSION}-linux-amd64.tar.gz -o /tmp/age.tar.gz \
@@ -18,6 +20,7 @@ RUN curl -s -L https://github.com/FiloSottile/age/releases/download/v${AGE_VERSI
     && mv /tmp/age/age /usr/local/bin/age \
     && mv /tmp/age/age-keygen /usr/local/bin/age-keygen \
     && rm -rf /tmp/{age,age.tar.gz}
+
 # install sops
 ENV SOPS_VERSION=3.8.1
 RUN curl -s -L https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux -o /usr/local/bin/sops \