Versions

Pins as of August 2026. Bump deliberately; do not float latest. When you bump, bump the Application targetRevision and this table together. Procedure: chart upgrades. Talos/Kubernetes: Talos day-2.

These match a long-lived homelab GitOps repo from the same period so the starter and that lab do not drift for no reason.

Component	Pin	Docs	Chart / image
Talos	v1.12.x (pick a patch at install)	Getting started, VIP, etcd snapshot	Image Factory
Kubernetes	whatever that Talos ships	Kubernetes docs, Ingress, Service without selectors, EndpointSlice, Pod Security	Talos release notes
Argo CD	Helm 8.6.0	App of Apps, sync waves	argoproj.github.io/argo-helm
MetalLB	0.15.2	Layer 2, IPAddressPool	metallb.github.io/metallb
Sealed Secrets	2.19.2	Usage	bitnami.github.io/sealed-secrets
cert-manager	v1.21.1	HTTP-01, Ingress annotations	charts.jetstack.io
NGINX Ingress Controller (F5)	2.6.4	Annotations	ghcr.io/nginx/charts
Step-CA	on the NAS	Getting started	Unraid / host install
step-issuer	1.11.0	cert-manager integration	smallstep.github.io/helm-charts
Let's Encrypt	ACME HTTP-01	HTTP-01, staging	ClusterIssuer in this repo
Longhorn	1.12.1	Architecture, Talos	charts.longhorn.io
nfs-subdir-external-provisioner	4.0.18	README (same repo)	kubernetes-sigs Helm repo
csi-s3	0.43.7	README (same repo)	yandex-cloud Helm repo
MinIO	on the NAS	S3 API	Unraid / host install
external-dns	image v0.21.0	RFC2136	registry.k8s.io
BIND 9	on the NAS	nsupdate / RFC2136	Unraid / host install
metrics-server	3.14.0	README (same repo)	kubernetes-sigs Helm repo
CloudNativePG	chart 0.29.0	API / Cluster	cloudnative-pg.github.io/charts
Barman Cloud plugin	0.7.1	Usage	same Helm repo
kube-prometheus-stack	88.5.0	Prometheus Operator, Grafana	prometheus-community
Flannel (Talos default CNI)	Talos-shipped	README — does not enforce NetworkPolicy	Talos