diff --git a/example-spin.yml b/example-spin.yml
index effa77c..2a04382 100644
--- a/example-spin.yml
+++ b/example-spin.yml
@@ -1,6 +1,6 @@
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/ingress/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#ingress-v1-networking-k8s-io
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#ingress-v1-networking-k8s-io
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -19,8 +19,8 @@ spec:
                   name: web
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/service/#type-clusterip
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#service-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#serviceport-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#service-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#serviceport-v1-core
 apiVersion: v1
 kind: Service
 metadata:
@@ -36,11 +36,11 @@ spec:
       targetPort: web
 ---
 # see https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#deployment-v1-apps
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#podtemplatespec-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#container-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#probe-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#httpgetaction-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#deployment-v1-apps
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#podtemplatespec-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#container-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#probe-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#httpgetaction-v1-core
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/example.yml b/example.yml
index 8f32875..7723c86 100644
--- a/example.yml
+++ b/example.yml
@@ -1,6 +1,6 @@
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/ingress/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#ingress-v1-networking-k8s-io
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#ingress-v1-networking-k8s-io
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -19,8 +19,8 @@ spec:
                   name: web
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/service/#type-clusterip
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#service-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#serviceport-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#service-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#serviceport-v1-core
 apiVersion: v1
 kind: Service
 metadata:
@@ -36,9 +36,9 @@ spec:
       targetPort: web
 ---
 # see https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#deployment-v1-apps
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#podtemplatespec-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#container-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#deployment-v1-apps
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#podtemplatespec-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#container-v1-core
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -78,7 +78,7 @@ spec:
                 resourceFieldRef:
                   resource: limits.cpu
             # see https://kubernetes.io/docs/tasks/inject-data-application/environment-variable-expose-pod-information/
-            # see https://github.com/kubernetes/kubernetes/blob/v1.30.4/test/e2e/common/node/downwardapi.go
+            # see https://github.com/kubernetes/kubernetes/blob/v1.31.0/test/e2e/common/node/downwardapi.go
             - name: EXAMPLE_NODE_NAME
               valueFrom:
                 fieldRef:
diff --git a/kubernetes-hello.yml b/kubernetes-hello.yml
index 16570c1..0a85133 100644
--- a/kubernetes-hello.yml
+++ b/kubernetes-hello.yml
@@ -1,13 +1,13 @@
 ---
 # see https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#serviceaccount-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#serviceaccount-v1-core
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: kubernetes-hello
 ---
 # see https://kubernetes.io/docs/reference/access-authn-authz/rbac/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#role-v1-rbac-authorization-k8s-io
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#role-v1-rbac-authorization-k8s-io
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -18,7 +18,7 @@ rules:
     verbs: ["get", "list"]
 ---
 # see https://kubernetes.io/docs/reference/access-authn-authz/rbac/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#rolebinding-v1-rbac-authorization-k8s-io
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#rolebinding-v1-rbac-authorization-k8s-io
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -32,7 +32,7 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/ingress/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#ingress-v1-networking-k8s-io
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#ingress-v1-networking-k8s-io
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -51,8 +51,8 @@ spec:
                   name: web
 ---
 # see https://kubernetes.io/docs/concepts/services-networking/service/#type-clusterip
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#service-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#serviceport-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#service-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#serviceport-v1-core
 apiVersion: v1
 kind: Service
 metadata:
@@ -68,9 +68,9 @@ spec:
       targetPort: web
 ---
 # see https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#deployment-v1-apps
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#podtemplatespec-v1-core
-# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.30/#container-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#deployment-v1-apps
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#podtemplatespec-v1-core
+# see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#container-v1-core
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/variables.tf b/variables.tf
index f05d8da..61c7654 100644
--- a/variables.tf
+++ b/variables.tf
@@ -15,7 +15,7 @@ variable "talos_version" {
 variable "kubernetes_version" {
   type = string
   # renovate: datasource=github-releases depName=siderolabs/kubelet
-  default = "1.30.4"
+  default = "1.31.0"
   validation {
     condition     = can(regex("^\\d+(\\.\\d+)+", var.kubernetes_version))
     error_message = "Must be a version number."