diff --git a/kubernetes/namespaces/tooling/keycloak/deployment.yaml b/kubernetes/namespaces/tooling/keycloak/deployment.yaml
index 397df39e..6957b133 100644
--- a/kubernetes/namespaces/tooling/keycloak/deployment.yaml
+++ b/kubernetes/namespaces/tooling/keycloak/deployment.yaml
@@ -32,7 +32,7 @@ spec:
       serviceAccountName: internal-tls-issuer
       containers:
         - name: keycloak
-          image: quay.io/keycloak/keycloak:25.0.2
+          image: quay.io/keycloak/keycloak:25.0.4
           args: ["start"]
           envFrom:
             - secretRef: