diff --git a/envri-hub/deploy.sh b/envri-hub/deploy.sh
index 8e5477ebdacec92d565aba89aebda35f0a349eb1..876fe9c51a4b631a7a19270b72ffc8e898ef6e4c 100755
--- a/envri-hub/deploy.sh
+++ b/envri-hub/deploy.sh
@@ -19,6 +19,7 @@ ansible -m command -a 'uname -a' allnodes
 ansible -m shell -a 'while ! test -f /var/lib/cloud/instance/boot-finished; do sleep 2; done' allnodes
 
 # kubernetes
+ansible-playbook playbooks/k8s.yaml
 ansible-playbook playbooks/squid.yaml
 ansible-playbook playbooks/cvmfs.yaml
 
diff --git a/envri-hub/playbooks/k8s.yaml b/envri-hub/playbooks/k8s.yaml
index 484c084fbc1cc5395182a18fe859a25fa60e7302..42314f47c653f5bcb4a0fdad730e75e0f9ca27d3 100644
--- a/envri-hub/playbooks/k8s.yaml
+++ b/envri-hub/playbooks/k8s.yaml
@@ -61,7 +61,7 @@
         filter: ansible_local
     - name: Cert-manager
       vars:
-        version: 1.16.1
+        version: 1.17.1
         config: >-
           --version={{ version }}
           --set ingressShim.defaultIssuerName=letsencrypt-prod
@@ -134,7 +134,7 @@
               storageClass: csi-sc-cinderplugin
     - name: Prometheus
       vars:
-        version: 25.28.0 # app v2.55.0
+        version: 27.8.0 # app v3.2.1
         config: >-
           --version={{ version }}
           -f /tmp/prometheus.yaml
@@ -184,7 +184,7 @@
               enabled: true
     - name: Grafana
       vars:
-        version: 8.5.11 # app 11.3.0
+        version: 8.11.2 # app 11.6.0
         config: >-
           --version={{ version }}
           -f /tmp/grafana.yaml