diff --git a/cluster.yml b/cluster.yml
index 0956c003..8d7f9761 100644
--- a/cluster.yml
+++ b/cluster.yml
@@ -1,6 +1,6 @@
 ---
 
-kubernetes_version: v1.8.5-rancher4
+kubernetes_version: v1.8.7-rancher1-1
 
 auth:
   strategy: x509
@@ -89,7 +89,7 @@ services:
 
 system_images:
   etcd: rancher/etcd:v3.0.17
-  kubernetes: rancher/k8s:v1.8.5-rancher4
+  kubernetes: rancher/k8s:v1.8.7-rancher1-1
   alpine: alpine:latest
   nginx_proxy: rancher/rke-nginx-proxy:v0.1.1
   cert_downloader: rancher/rke-cert-deployer:v0.1.1
diff --git a/cluster/defaults.go b/cluster/defaults.go
index 2cc29845..4e67b39c 100644
--- a/cluster/defaults.go
+++ b/cluster/defaults.go
@@ -33,7 +33,7 @@ const (
 	DefaultIngressController              = "nginx"
 
 	DefaultEtcdImage = "rancher/etcd:v3.0.17"
-	DefaultK8sImage  = "rancher/k8s:v1.8.5-rancher4"
+	DefaultK8sImage  = "rancher/k8s:v1.8.7-rancher1-1"
 
 	DefaultFlannelImage    = "rancher/coreos-flannel:v0.9.1"
 	DefaultFlannelCNIImage = "rancher/coreos-flannel-cni:v0.2.0"