diff --git a/go.mod b/go.mod
index c12eb37a64..510f8803d4 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/k3s-io/k3s
 
-go 1.23.3
+go 1.23.6
 
 replace (
 	github.com/Microsoft/hcsshim => github.com/Microsoft/hcsshim v0.12.9
@@ -111,7 +111,7 @@ require (
 	github.com/joho/godotenv v1.5.1
 	github.com/json-iterator/go v1.1.12
 	github.com/k3s-io/api v0.1.0
-	github.com/k3s-io/helm-controller v0.16.6
+	github.com/k3s-io/helm-controller v0.16.10
 	github.com/k3s-io/kine v0.13.9
 	github.com/klauspost/compress v1.17.11
 	github.com/libp2p/go-libp2p v0.38.2
diff --git a/go.sum b/go.sum
index b40ea06107..4c8e7a9fdd 100644
--- a/go.sum
+++ b/go.sum
@@ -797,8 +797,8 @@ github.com/k3s-io/etcd/raft/v3 v3.5.19-k3s1 h1:xna0XNCD/rErztr88ECqd3SeTVgD0IGO4
 github.com/k3s-io/etcd/raft/v3 v3.5.19-k3s1/go.mod h1:WKCdvqs9USiM72tau3LZEyybDWKbyaQV0k135O3C4xw=
 github.com/k3s-io/etcd/server/v3 v3.5.19-k3s1 h1:1X30nP+ySC9d9xUIg1ftj6jF76MA5peCR84O+mm2WCI=
 github.com/k3s-io/etcd/server/v3 v3.5.19-k3s1/go.mod h1:sEMCH1EdYxuWsFu2PzH31jEsmeCQqTUZ7E1uSo9gpg0=
-github.com/k3s-io/helm-controller v0.16.6 h1:w/cdunYPTmatAMrYlf/qbmuatrKjfpC122ISn5QfIpA=
-github.com/k3s-io/helm-controller v0.16.6/go.mod h1:Zy6dK6PIepVPOH2wM3sg00RsJLAk3FkXIJl+rWeHC3Y=
+github.com/k3s-io/helm-controller v0.16.10 h1:mOD/zi2AOJGXlx+Xet+xDYvBpvN8BXgjbIG+69kRXhg=
+github.com/k3s-io/helm-controller v0.16.10/go.mod h1:vqX0CJPbj98bnnKzCjjJ71a885W+CHphOZg2INy5Nbk=
 github.com/k3s-io/kine v0.13.9 h1:Dcobn5rXfl0tGCTPJzLRsowxAnK/4hhLzRGuPXhRJVQ=
 github.com/k3s-io/kine v0.13.9/go.mod h1:eBfR4kXgSkB4yIL+S3bF1+z5cvgYz8wbXrwANeL/Qok=
 github.com/k3s-io/klog/v2 v2.120.1-k3s1 h1:7twAHPFpZA21KdMnMNnj68STQMPldAxF2Zsaol57dxw=
diff --git a/pkg/server/server.go b/pkg/server/server.go
index 3ce4cf947f..90ba28e0e0 100644
--- a/pkg/server/server.go
+++ b/pkg/server/server.go
@@ -259,7 +259,8 @@ func coreControllers(ctx context.Context, sc *Context, config *Config) error {
 			auth.V1().ClusterRoleBinding(),
 			core.V1().ServiceAccount(),
 			core.V1().ConfigMap(),
-			core.V1().Secret())
+			core.V1().Secret(),
+			core.V1().Secret().Cache())
 	}
 
 	if config.ControlConfig.Rootless {
diff --git a/scripts/airgap/image-list.txt b/scripts/airgap/image-list.txt
index a504766532..62552b7406 100644
--- a/scripts/airgap/image-list.txt
+++ b/scripts/airgap/image-list.txt
@@ -1,4 +1,4 @@
-docker.io/rancher/klipper-helm:v0.9.4-build20250113
+docker.io/rancher/klipper-helm:v0.9.5-build20250306
 docker.io/rancher/klipper-lb:v0.4.13
 docker.io/rancher/local-path-provisioner:v0.0.31
 docker.io/rancher/mirrored-coredns-coredns:1.12.1