diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml
index 3d534edde..5f1b4f343 100644
--- a/.github/workflows/ci-test.yml
+++ b/.github/workflows/ci-test.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        k8sVersion: ["1.25.x", "1.26.x", "1.27.x"]
+        k8sVersion: ["1.25.x", "1.26.x", "1.27.x", "1.28.x"]
     env:
       K8S_VERSION: ${{ matrix.k8sVersion }}
     steps:
@@ -18,7 +18,9 @@ jobs:
       with:
         k8sVersion: ${{ matrix.k8sVersion }}    
     - run: K8S_VERSION=${{ matrix.k8sVersion }} make ci-test
-#    - uses: shogo82148/actions-goveralls@v1
-#      if: env.K8S_VERSION == '1.25.x'
-#      with:
-#        path-to-profile: coverage.out
+    - name: Send coverage
+      # should only send converage once https://docs.coveralls.io/parallel-builds
+      if: matrix.k8sVersion == '1.27.x'
+      env:
+        COVERALLS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: goveralls -coverprofile=coverage.out -service=github
diff --git a/hack/toolchain.sh b/hack/toolchain.sh
index cd4a62328..030fdf2af 100755
--- a/hack/toolchain.sh
+++ b/hack/toolchain.sh
@@ -21,6 +21,7 @@ tools() {
 #   go install -tags extended github.com/gohugoio/hugo@v0.110.0
     go install golang.org/x/vuln/cmd/govulncheck@v1.0.1
     go install github.com/onsi/ginkgo/v2/ginkgo@latest
+    go install github.com/mattn/goveralls@v0.0.12
 
     if ! echo "$PATH" | grep -q "${GOPATH:-undefined}/bin\|$HOME/go/bin"; then
         echo "Go workspace's \"bin\" directory is not in PATH. Run 'export PATH=\"\$PATH:\${GOPATH:-\$HOME/go}/bin\"'."
diff --git a/pkg/providers/imagefamily/bootstrap/aksbootstrap.go b/pkg/providers/imagefamily/bootstrap/aksbootstrap.go
index a2df0c87e..babfb7a60 100644
--- a/pkg/providers/imagefamily/bootstrap/aksbootstrap.go
+++ b/pkg/providers/imagefamily/bootstrap/aksbootstrap.go
@@ -253,7 +253,6 @@ var (
 		"--enforce-node-allocatable":          "pods",
 		"--event-qps":                         "0",
 		"--eviction-hard":                     "memory.available<750Mi,nodefs.available<10%,nodefs.inodesFree<5%",
-		"--feature-gates":                     "CSIMigrationAzureFile=true,DelegateFSGroupToCSIDriver=true,RotateKubeletServerCertificate=true",
 		"--image-gc-high-threshold":           "85",
 		"--image-gc-low-threshold":            "80",
 		"--keep-terminated-pod-volumes":       "false",