diff --git a/images/spire/tests/main.tf b/images/spire/tests/main.tf
index 08c8971beb..fd6ef724e6 100644
--- a/images/spire/tests/main.tf
+++ b/images/spire/tests/main.tf
@@ -50,6 +50,15 @@ module "spire" {
         repository = data.oci_string.ref["server"].repo
         tag        = data.oci_string.ref["server"].pseudo_tag
       }
+      tools = {
+        kubectl = {
+          image = {
+            registry   = "cgr.dev"
+            repository = "chainguard/kubectl"
+            tag        = "latest"
+          }
+        }
+      }
     }
     spire-agent = {
       enabled = true
@@ -58,6 +67,15 @@ module "spire" {
         repository = data.oci_string.ref["agent"].repo
         tag        = data.oci_string.ref["agent"].pseudo_tag
       }
+      tools = {
+        kubectl = {
+          image = {
+            registry   = "cgr.dev"
+            repository = "chainguard/kubectl"
+            tag        = "latest"
+          }
+        }
+      }
     }
     spiffe-oidc-discovery-provider = {
       enabled = true
@@ -71,6 +89,23 @@ module "spire" {
           tosAccepted = true
         }
       }
+      tools = {
+        kubectl = {
+          image = {
+            registry   = "cgr.dev"
+            repository = "chainguard/kubectl"
+            tag        = "latest"
+          }
+        }
+      }
+      tests = {
+        toolkit = {
+          image = {
+            repository = "chainguard/min-toolkit-debug"
+            tag        = "latest"
+          }
+        }
+      }
     }
   }
 }