This handles automated upgrades of the Talos OS and Kubernetes cluster using tuppr, a Talos-native upgrade controller with CEL-based health checks.
- tuppr.yaml - HelmRelease for the tuppr controller
- talos-upgrade.yaml - TalosUpgrade CR that automatically upgrades Talos OS to the defined version (managed by Renovate)
- kubernetes-upgrade.yaml - KubernetesUpgrade CR that automatically upgrades Kubernetes to the defined version (managed by Renovate)
Both upgrade resources include CEL-based health checks that verify:
- VolSync ReplicationSource - All sync jobs must have
Synchronizing=Falseto prevent upgrades during active PVC backups - CephCluster - Must report
HEALTH_OKto prevent upgrades during degraded storage