diff --git a/.gitignore b/.gitignore
index 19505f1..a747661 100644
--- a/.gitignore
+++ b/.gitignore
@@ -94,3 +94,4 @@
 /container-selinux-1c24dcb.tar.gz
 /container-selinux-b275a1f.tar.gz
 /container-selinux-7baad79.tar.gz
+/container-selinux-fc7111d.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index e1875fe..fc2a771 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
-%global commit0 7baad79ed099c333465157a8c981d4393a381304
+%global commit0 fc7111d5a9649a3fd21972e190be505c1efdd8be
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -26,7 +26,7 @@ Name: container-selinux
 %if 0%{?fedora}
 Epoch: 2
 %endif
-Version: 2.104
+Version: 2.106
 Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -109,6 +109,10 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Tue Jun 11 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.106-1
+- Allow all unconfined domains to manage unlabeled keyrings
+- Add labeling for kubernetes pods
+
 * Mon Jun 3 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.104-1
 - Set proper labeling for container volumes in SilverBlue
 
diff --git a/sources b/sources
index bd36024..27ec454 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-7baad79.tar.gz) = 9ac2e28bd0f435b24f1705c06875b94d6a4e4cebe7db4a2c3ad23b8dbda4f96e114acf963065f85327102ec7b179bd21d6b54d1c47b9ca04b06c811f714952da
+SHA512 (container-selinux-fc7111d.tar.gz) = 4e72112d708d0c3693918aa4bbfb0a6362d393be31350195c18ef72ef2eef29e5b2ae0c91f3c882cd3c000cd03d475fb1443d52213ba20b6eb5add90b2ef1e54