diff --git a/infra/ansible/roles/k3s_server/defaults/main.yml b/infra/ansible/roles/k3s_server/defaults/main.yml
index 967ba0b..dd3036d 100644
--- a/infra/ansible/roles/k3s_server/defaults/main.yml
+++ b/infra/ansible/roles/k3s_server/defaults/main.yml
@@ -3,7 +3,7 @@
 
 # Best-effort version pin (kept near the ci/versions kubectl 1.31.x line). Bump
 # deliberately — a version change is a code change. Empty string => latest stable.
-k3s_version: "v1.31.5+k3s1"
+k3s_version: "v1.36.4+k3s1"
 
 k3s_install_url: "https://get.k3s.io"
 k3s_install_script: "/usr/local/bin/k3s-install.sh"