diff --git a/modules/acm/policy_bundles.tf b/modules/acm/policy_bundles.tf
index b03987e867..53ea675403 100644
--- a/modules/acm/policy_bundles.tf
+++ b/modules/acm/policy_bundles.tf
@@ -16,7 +16,7 @@
 
 module "policy_bundles" {
   source  = "terraform-google-modules/gcloud/google//modules/kubectl-wrapper"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   for_each                = toset(var.policy_bundles)
   project_id              = var.project_id
diff --git a/modules/asm/main.tf b/modules/asm/main.tf
index 666621c816..4585cc2afd 100644
--- a/modules/asm/main.tf
+++ b/modules/asm/main.tf
@@ -61,7 +61,7 @@ module "cpr" {
   count = var.mesh_management != "MANAGEMENT_AUTOMATIC" ? 1 : 0
 
   source  = "terraform-google-modules/gcloud/google//modules/kubectl-wrapper"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   project_id       = var.project_id
   cluster_name     = var.cluster_name
@@ -80,7 +80,7 @@ module "kubectl_asm_wait_for_controlplanerevision_custom_resource_definition" {
   count = var.mesh_management == "MANAGEMENT_AUTOMATIC" ? 1 : 0
 
   source  = "terraform-google-modules/gcloud/google//modules/kubectl-wrapper"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   project_id              = var.project_id
   cluster_name            = var.cluster_name
@@ -100,7 +100,7 @@ module "kubectl_asm_wait_for_controlplanerevision" {
   count = var.mesh_management == "MANAGEMENT_AUTOMATIC" ? 1 : 0
 
   source  = "terraform-google-modules/gcloud/google//modules/kubectl-wrapper"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   project_id              = var.project_id
   cluster_name            = var.cluster_name
diff --git a/modules/hub-legacy/main.tf b/modules/hub-legacy/main.tf
index c2dcb88c42..3b25c286d2 100644
--- a/modules/hub-legacy/main.tf
+++ b/modules/hub-legacy/main.tf
@@ -69,7 +69,7 @@ resource "google_service_account_key" "gke_hub_key" {
 
 module "gke_hub_registration" {
   source  = "terraform-google-modules/gcloud/google"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   platform                          = "linux"
   gcloud_sdk_version                = var.gcloud_sdk_version
diff --git a/modules/workload-identity/main.tf b/modules/workload-identity/main.tf
index eaa9a0b47d..e64d3455e2 100644
--- a/modules/workload-identity/main.tf
+++ b/modules/workload-identity/main.tf
@@ -64,7 +64,7 @@ resource "kubernetes_service_account" "main" {
 
 module "annotate-sa" {
   source  = "terraform-google-modules/gcloud/google//modules/kubectl-wrapper"
-  version = "~> 3.1"
+  version = "~> 4.0"
 
   enabled                     = var.use_existing_k8s_sa && var.annotate_k8s_sa
   skip_download               = true