diff --git a/README.md b/README.md
index 8728fc1..2e90398 100644
--- a/README.md
+++ b/README.md
@@ -44,8 +44,8 @@ gantt
 # Components
 
 ## OS
-- all compute nodes are running on Alpine V3.18
-- 2 GB encrypted root file system
+- all compute nodes are running on Alpine V3.19
+- 1 or 2 GB encrypted root file system
 - no external dependencies at boot time, apart from container registries
 - minimal attack surface
 - extremely small memory footprint / overhead
diff --git a/charts/kubeadm/templates/ClusterConfiguration.yaml b/charts/kubeadm/templates/ClusterConfiguration.yaml
index 16ef0a9..8a18a15 100644
--- a/charts/kubeadm/templates/ClusterConfiguration.yaml
+++ b/charts/kubeadm/templates/ClusterConfiguration.yaml
@@ -2,7 +2,8 @@ apiVersion: kubeadm.k8s.io/v1beta3
 kind: ClusterConfiguration
 kubernetesVersion: {{ .Chart.Version }}
 clusterName: {{ .Values.global.clusterName }}
-#featureGates:
+featureGates:
+  EtcdLearnerMode: true # becomes beta in 1.29
 #  NonGracefulFailover: true
 controlPlaneEndpoint: {{ .Values.api.endpoint }}
 networking:
diff --git a/charts/kubezero-istio-gateway/README.md b/charts/kubezero-istio-gateway/README.md
index 7a3cfad..dbc4ca5 100644
--- a/charts/kubezero-istio-gateway/README.md
+++ b/charts/kubezero-istio-gateway/README.md
@@ -1,6 +1,6 @@
 # kubezero-istio-gateway
 
-![Version: 0.21.1](https://img.shields.io/badge/Version-0.21.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.21.2](https://img.shields.io/badge/Version-0.21.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 KubeZero Umbrella Chart for Istio gateways
 
@@ -21,7 +21,7 @@ Kubernetes: `>= 1.26.0`
 | Repository | Name | Version |
 |------------|------|---------|
 | https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
-| https://istio-release.storage.googleapis.com/charts | gateway | 1.21.1 |
+| https://istio-release.storage.googleapis.com/charts | gateway | 1.21.2 |
 
 ## Values
 
diff --git a/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml b/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml
index f484311..91367b3 100644
--- a/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml
+++ b/charts/kubezero-istio-gateway/charts/gateway/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.21.1
+appVersion: 1.21.2
 description: Helm chart for deploying Istio gateways
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
@@ -9,4 +9,4 @@ name: gateway
 sources:
 - https://github.com/istio/istio
 type: application
-version: 1.21.1
+version: 1.21.2
diff --git a/charts/kubezero-istio/README.md b/charts/kubezero-istio/README.md
index 6c43449..329afdb 100644
--- a/charts/kubezero-istio/README.md
+++ b/charts/kubezero-istio/README.md
@@ -1,6 +1,6 @@
 # kubezero-istio
 
-![Version: 0.21.1](https://img.shields.io/badge/Version-0.21.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.21.2](https://img.shields.io/badge/Version-0.21.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 KubeZero Umbrella Chart for Istio
 
@@ -21,9 +21,9 @@ Kubernetes: `>= 1.26.0`
 | Repository | Name | Version |
 |------------|------|---------|
 | https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
-| https://istio-release.storage.googleapis.com/charts | base | 1.21.1 |
-| https://istio-release.storage.googleapis.com/charts | istiod | 1.21.1 |
-| https://kiali.org/helm-charts | kiali-server | 1.82.0 |
+| https://istio-release.storage.googleapis.com/charts | base | 1.21.2 |
+| https://istio-release.storage.googleapis.com/charts | istiod | 1.21.2 |
+| https://kiali.org/helm-charts | kiali-server | 1.83.0 |
 
 ## Values
 
diff --git a/charts/kubezero-operators/README.md b/charts/kubezero-operators/README.md
index a2c4dff..e637d9f 100644
--- a/charts/kubezero-operators/README.md
+++ b/charts/kubezero-operators/README.md
@@ -1,6 +1,6 @@
 # kubezero-operators
 
-![Version: 0.1.2](https://img.shields.io/badge/Version-0.1.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.1.3](https://img.shields.io/badge/Version-0.1.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 Various operators supported by KubeZero
 
@@ -20,7 +20,7 @@ Kubernetes: `>= 1.26.0`
 |------------|------|---------|
 | https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
 | https://helm.elastic.co | eck-operator | 2.12.1 |
-| https://opensearch-project.github.io/opensearch-k8s-operator/ | opensearch-operator | 2.5.1 |
+| https://opensearch-project.github.io/opensearch-k8s-operator/ | opensearch-operator | 2.6.0 |
 
 ## Values
 
diff --git a/charts/kubezero/values.yaml b/charts/kubezero/values.yaml
index 0546bfa..ec647b8 100644
--- a/charts/kubezero/values.yaml
+++ b/charts/kubezero/values.yaml
@@ -58,13 +58,13 @@ storage:
 istio:
   enabled: false
   namespace: istio-system
-  targetRevision: 0.21.1
+  targetRevision: 0.21.2
 
 istio-ingress:
   enabled: false
   chart: kubezero-istio-gateway
   namespace: istio-ingress
-  targetRevision: 0.21.1
+  targetRevision: 0.21.2
   gateway:
     service: {}
 
@@ -72,7 +72,7 @@ istio-private-ingress:
   enabled: false
   chart: kubezero-istio-gateway
   namespace: istio-ingress
-  targetRevision: 0.21.1
+  targetRevision: 0.21.2
   gateway:
     service: {}
 
@@ -90,7 +90,7 @@ telemetry:
 operators:
   enabled: false
   namespace: operators
-  targetRevision: 0.1.2
+  targetRevision: 0.1.3
 
 metrics:
   enabled: false
diff --git a/docs/expand-control-plane.md b/docs/expand-control-plane.md
index 66feb65..f98041f 100644
--- a/docs/expand-control-plane.md
+++ b/docs/expand-control-plane.md
@@ -2,5 +2,4 @@
 - change CFN for control plabe to HA and deploy
   This will launch controllers in AZ2 and AZ3 joining the party
 - change the HA flag in kubezero-values CM
-- ensure ArgoCD is either disabled or ensure correct settings pushed to git etc.
-- termitate the original controller and manually delete its etcd membership as the etcd name changes -> Might change that for next release ??
+- update KubeZero either via cli or ArgoCD
diff --git a/docs/v1.28.md b/docs/v1.28.md
index b1a3875..514b6b1 100644
--- a/docs/v1.28.md
+++ b/docs/v1.28.md
@@ -8,7 +8,7 @@
 
 ## Version upgrades
 - cilium 1.15.3
-- istio 1.21.1
+- istio 1.21.2
 - fluent-bit 3.0.1
 - ArgoCD 2.10.6
 - Prometheus 2.51.1 / Grafana 10.4