diff --git a/ephemeral/controlplane.tf b/ephemeral/controlplane.tf
index 21c11c79..8aebd0b3 100644
--- a/ephemeral/controlplane.tf
+++ b/ephemeral/controlplane.tf
@@ -80,7 +80,7 @@ resource "digitalocean_reserved_ip" "l2" {
 }
 
 resource "talos_machine_secrets" "this" {
-  talos_version = "v1.9"
+  talos_version = "v1.8"
 }
 
 data "talos_machine_configuration" "cp" {
@@ -88,7 +88,7 @@ data "talos_machine_configuration" "cp" {
   machine_type     = "controlplane"
   cluster_endpoint = "https://${local.loadbalancer_dns}:6443"
   machine_secrets  = talos_machine_secrets.this.machine_secrets
-  talos_version    = "v1.9"
+  talos_version    = "v1.8"
   config_patches = [
     templatefile("${path.module}/templates/controlplane_patch.yml", {
       loadbalancerdns = "kube.${local.prefix}.fluence.dev"
diff --git a/ephemeral/main.tf b/ephemeral/main.tf
index ab50b58d..cba9bd3c 100644
--- a/ephemeral/main.tf
+++ b/ephemeral/main.tf
@@ -13,7 +13,7 @@ resource "digitalocean_ssh_key" "spectrum" {
 }
 
 data "digitalocean_image" "talos" {
-  name = "talos-v1.9.0"
+  name = "talos-v1.8.4"
 }
 
 data "vault_generic_secret" "spectrum" {
diff --git a/terraform-modules/talos/templates/controlplane_patch.yml b/terraform-modules/talos/templates/controlplane_patch.yml
index 2ee065db..05fdf74e 100644
--- a/terraform-modules/talos/templates/controlplane_patch.yml
+++ b/terraform-modules/talos/templates/controlplane_patch.yml
@@ -5,7 +5,7 @@ machine:
   install:
       diskSelector:
         size: '>= 100GB'
-      image: ghcr.io/siderolabs/installer:v1.9.0
+      image: ghcr.io/siderolabs/installer:v1.8.4
       bootloader: true
       wipe: true
   kubelet: