diff --git a/.github/ISSUE_TEMPLATE/BUG_REPORT.md b/.github/ISSUE_TEMPLATE/BUG_REPORT.md
index f52a8de..0da69d7 100644
--- a/.github/ISSUE_TEMPLATE/BUG_REPORT.md
+++ b/.github/ISSUE_TEMPLATE/BUG_REPORT.md
@@ -15,7 +15,7 @@ It is still being developed, but you can also use it for production.
 However, there is no easy, one-click solution here.
 
 To use it, you must know what you are doing.
-You should understand how to work with tools like Terraform, Talos, Makefile, sops, and others tools.
+You should understand how to work with tools like Terraform, Talos, Makefile, sops, and others.
 -->
 
 ### Description
diff --git a/proxmox/Makefile b/proxmox/Makefile
index b55e58f..1d496f5 100644
--- a/proxmox/Makefile
+++ b/proxmox/Makefile
@@ -64,7 +64,7 @@ nodes: ## Show kubernetes nodes
 	@kubectl get nodes -owide --sort-by '{.metadata.name}' --label-columns topology.kubernetes.io/region,topology.kubernetes.io/zone,node.kubernetes.io/instance-type
 
 system:
-	helm --kubeconfig=kubeconfig upgrade -i --namespace=kube-system --version=1.16.3 -f deployments/cilium.yaml \
+	helm --kubeconfig=kubeconfig upgrade -i --namespace=kube-system --version=1.16.4 -f deployments/cilium.yaml \
 		cilium cilium/cilium
 
 	kubectl --kubeconfig=kubeconfig apply -f ../_deployments/vars/coredns-local.yaml
diff --git a/proxmox/deployments/cilium.yaml b/proxmox/deployments/cilium.yaml
index 2ac77d7..ea32773 100644
--- a/proxmox/deployments/cilium.yaml
+++ b/proxmox/deployments/cilium.yaml
@@ -1,5 +1,4 @@
 ---
-
 k8sServiceHost: "api.cluster.local"
 k8sServicePort: "6443"
 
@@ -84,4 +83,4 @@ resources:
     memory: 2Gi
   requests:
     cpu: 100m
-    memory: 128Mi
+    memory: 256Mi
diff --git a/proxmox/templates/controlplane.yaml.tpl b/proxmox/templates/controlplane.yaml.tpl
index 0317d72..4a04f97 100644
--- a/proxmox/templates/controlplane.yaml.tpl
+++ b/proxmox/templates/controlplane.yaml.tpl
@@ -46,8 +46,11 @@ machine:
       enabled: true
       allowedRoles:
         - os:reader
+        - os:admin
+        - os:etcd:backup
       allowedKubernetesNamespaces:
         - kube-system
+        - operator-talos
 cluster:
   adminKubeconfig:
     certLifetime: 48h0m0s
diff --git a/proxmox/variables.tf b/proxmox/variables.tf
index 3920fc9..e5f18a2 100644
--- a/proxmox/variables.tf
+++ b/proxmox/variables.tf
@@ -86,7 +86,7 @@ variable "instances" {
   type        = map(any)
   default = {
     "all" = {
-      version = "v1.31.2"
+      version = "v1.31.3"
     },
     "hvm-1" = {
       enabled         = false,