diff --git a/changelog/v0.10.6.md b/changelog/v0.10.6.md
new file mode 100644
index 0000000..990cec9
--- /dev/null
+++ b/changelog/v0.10.6.md
@@ -0,0 +1,11 @@
+# v0.10.6
+
+**Released:** 2026-01-28
+
+## Changes
+
+Fix ensureNamespace RBAC failure, add namespace/secrets permissions to deployer ClusterRole
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.6`
diff --git a/deployments/k8s/base/rdev-api.yaml b/deployments/k8s/base/rdev-api.yaml
index c3a98f5..63f59cc 100644
--- a/deployments/k8s/base/rdev-api.yaml
+++ b/deployments/k8s/base/rdev-api.yaml
@@ -24,7 +24,7 @@ spec:
       serviceAccountName: rdev-api
       containers:
         - name: rdev-api
-          image: ghcr.io/orchard9/rdev-api:v0.10.5
+          image: ghcr.io/orchard9/rdev-api:v0.10.6
           imagePullPolicy: Always
 
           ports: