diff --git a/bootstrap/system-upgrades/kustomization.yaml b/bootstrap/system-upgrades/kustomization.yaml
index 66ddcfc7b2fe6c2870b322dbd94ed65b4bd34673..f94154d27731804893a8ac00a36c422567ad5c06 100644
--- a/bootstrap/system-upgrades/kustomization.yaml
+++ b/bootstrap/system-upgrades/kustomization.yaml
@@ -2,5 +2,17 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: system-upgrade
 resources:
-  - https://git.shivering-isles.com/github-mirror/rancher/system-upgrade-controller/-/raw/v0.9.1/manifests/system-upgrade-controller.yaml
+  - https://git.shivering-isles.com/github-mirror/rancher/system-upgrade-controller/-/raw/v0.10.0/manifests/system-upgrade-controller.yaml
   - ../../shared/networkpolicies/allow-from-same-namespace.yaml
+patches:
+  - patch: |
+        - op: replace
+          path: /spec/template/spec/affinity/nodeAffinity/requiredDuringSchedulingIgnoredDuringExecution/nodeSelectorTerms/0/
+          value:
+            matchExpressions:
+                - {key: "node-role.kubernetes.io/control-plane", operator: Exists}
+     
+    target:
+      kind: Deployment
+      name: system-upgrade-controller
+      namespace: system-upgrade