diff --git a/kube/deploy/core/monitoring/karma/app/hr.yaml b/kube/deploy/core/monitoring/karma/app/hr.yaml
index 6a5efe94..7e4b76f3 100644
--- a/kube/deploy/core/monitoring/karma/app/hr.yaml
+++ b/kube/deploy/core/monitoring/karma/app/hr.yaml
@@ -27,7 +27,7 @@ spec:
           main:
             image: &img
               repository: "ghcr.io/prymitive/karma"
-              tag: "v0.121@sha256:9f0ad820df1b1d0af562de3b3c545a52ddfce8d7492f434a2276e45f3a1f7e28"
+              tag: "v0.122@sha256:87312daa8b8ca740e2acd427fc996724f8c69e36b9f0ad15c1961c1e4ccb1987"
             env:
               TZ: "${CONFIG_TZ}"
               # TODO: use full config mapping to all AM instances and 1 cluster, including different deployments for authentik, cloudflared and Tailscale's forward auth headers