diff --git a/kube/deploy/apps/authentik/ldap/hr.yaml b/kube/deploy/apps/authentik/ldap/hr.yaml
index a27f3467..dedb72ef 100644
--- a/kube/deploy/apps/authentik/ldap/hr.yaml
+++ b/kube/deploy/apps/authentik/ldap/hr.yaml
@@ -22,7 +22,7 @@ spec:
       replicas: 2
     image:
       repository: ghcr.io/goauthentik/ldap
-      tag: "2023.10.5@sha256:4f0722da4bd67e4bd261154556bc93d461c0b0f3784ab907c4177504140e5322"
+      tag: "2023.10.6@sha256:1a17c68ee7392710fb2cdd18603456b4016a0d624194ec449fe76009582960df"
     podLabels:
       egress.home.arpa/nginx-external: "allow"
     env: