From 760883e179a8eda883f6e5c1aa7fd288c91b9405 Mon Sep 17 00:00:00 2001
From: "ro-bott[bot]" <151924872+ro-bott[bot]@users.noreply.github.com>
Date: Thu, 23 Apr 2026 18:17:48 +0000
Subject: [PATCH] =?UTF-8?q?feat(container):=20update=20kubernetes=20group?=
 =?UTF-8?q?=20(=20v1.35.4=20=E2=9E=94=20v1.36.0=20)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../tuppr/upgrades/kubernetesupgrade.yaml              |  2 +-
 talos/machineconfig.yaml.j2                            | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml b/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
index 99d4957e3..2c5cfc5b1 100644
--- a/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
+++ b/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   kubernetes:
     # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-    version: v1.35.4
+    version: v1.36.0
   healthChecks:
     - apiVersion: volsync.backube/v1alpha1
       kind: ReplicationSource
diff --git a/talos/machineconfig.yaml.j2 b/talos/machineconfig.yaml.j2
index a7806b0ca..497de11b0 100644
--- a/talos/machineconfig.yaml.j2
+++ b/talos/machineconfig.yaml.j2
@@ -54,7 +54,7 @@ machine:
     disableManifestsDirectory: true
     extraConfig:
       serializeImagePulls: false
-    image: ghcr.io/siderolabs/kubelet:v1.35.4
+    image: ghcr.io/siderolabs/kubelet:v1.36.0
     nodeIP:
       validSubnets:
         - 10.1.1.0/24
@@ -128,11 +128,11 @@ cluster:
       enable-aggregator-routing: "true"
       feature-gates: MutatingAdmissionPolicy=true
       runtime-config: admissionregistration.k8s.io/v1beta1=true
-    image: registry.k8s.io/kube-apiserver:v1.35.4
+    image: registry.k8s.io/kube-apiserver:v1.36.0
   controllerManager:
     extraArgs:
       bind-address: 0.0.0.0
-    image: registry.k8s.io/kube-controller-manager:v1.35.4
+    image: registry.k8s.io/kube-controller-manager:v1.36.0
   coreDNS:
     disabled: true
   etcd:
@@ -145,7 +145,7 @@ cluster:
       listen-metrics-urls: http://0.0.0.0:2381
   proxy:
     disabled: true
-    image: registry.k8s.io/kube-proxy:v1.35.4
+    image: registry.k8s.io/kube-proxy:v1.36.0
   scheduler:
     config:
       apiVersion: kubescheduler.config.k8s.io/v1
@@ -166,7 +166,7 @@ cluster:
                     whenUnsatisfiable: ScheduleAnyway
     extraArgs:
       bind-address: 0.0.0.0
-    image: registry.k8s.io/kube-scheduler:v1.35.4
+    image: registry.k8s.io/kube-scheduler:v1.36.0
   secretboxEncryptionSecret: op://home-ops/talos/CLUSTER_SECRETBOXENCRYPTIONSECRET
   serviceAccount:
     key: op://home-ops/talos/CLUSTER_SERVICEACCOUNT_KEY