diff --git a/clusters/base/apps/woodpecker/helmrelease.yaml b/clusters/base/apps/woodpecker/helmrelease.yaml
index bf621f7..50201ed 100644
--- a/clusters/base/apps/woodpecker/helmrelease.yaml
+++ b/clusters/base/apps/woodpecker/helmrelease.yaml
@@ -24,7 +24,7 @@ spec:
           app:
             image:
               repository: woodpeckerci/woodpecker-server
-              tag: v3.8.0
+              tag: v3.18.1
             env:
               WOODPECKER_HOST: https://ci.aggtaa.com
               WOODPECKER_OPEN: "false"
@@ -46,11 +46,13 @@ spec:
         replicas: 1
         serviceAccount:
           name: woodpecker-agent # created in rbac.yaml
+        pod:
+          automountServiceAccountToken: true # kubernetes backend uses in-cluster config
         containers:
           app:
             image:
               repository: woodpeckerci/woodpecker-agent
-              tag: v3.8.0
+              tag: v3.18.1
             env:
               WOODPECKER_SERVER: woodpecker:9000
               WOODPECKER_BACKEND: kubernetes