diff --git a/lab/_envcommon/default-versions.hcl b/lab/_envcommon/default-versions.hcl
index 3c47898..cf0e8af 100644
--- a/lab/_envcommon/default-versions.hcl
+++ b/lab/_envcommon/default-versions.hcl
@@ -115,8 +115,8 @@ locals {
   # k8s-dashboard
   ################
   dashboard_hostname            = "dashboard"
-  k8s_dashboard_version         = "6.0.6"
-  k8s_dashboard_metrics_scraper = "1.0.8"
+  k8s_dashboard_version         = "v2.7.0"
+  k8s_dashboard_metrics_scraper = "v1.0.9"
   # dashboard_api_tag     = "1.11.1"
   # dashboard_auth_tag    = "1.2.4"
   # dashboard_metrics_tag = "1.2.2"
@@ -133,12 +133,12 @@ locals {
   # Keycloak
   ################
   keycloak_chart_version = "24.4.11"
-  keycloak_tag           = "26.1.3"
+  keycloak_tag           = "26.0.7"
   keycloak_hostname      = "keycloak"
   keycloak_database      = "keycloak"
   keycloak_username      = "keycloak"
   keycloak_password      = "this is my very secure and totally random password horse battery staple now"
-  postgresql_tag         = "17.4.0-debian-12-r2"
+  postgresql_tag         = "17"
   utilities_tag          = "1.0.3"
 
   ################
@@ -172,7 +172,7 @@ locals {
   collector_version                 = "0.111.0-amd64"
   otel_helm_version                 = "0.71.2"
   otel_version                      = "0.110.0"
-  rbac_proxy_version                = "v0.18.1"
+  rbac_proxy_version                = "v0.19.0"
 
   ################
   # PostgreSQL
diff --git a/lab/root.hcl b/lab/root.hcl
index aaf6746..86b5573 100644
--- a/lab/root.hcl
+++ b/lab/root.hcl
@@ -165,6 +165,11 @@ generate "eecr-provider" {
     profile = "${local.eecr_profile}"
     region = "${local.aws_region}"
   }
+  data "aws_ecr_authorization_token" "ecr_token" {
+    provider    = aws.eecr
+    registry_id = var.eecr_account_id
+  }
+
 EOF
 }