diff --git a/infrastructure/system-upgrades/kubernetes.yaml b/infrastructure/system-upgrades/kubernetes.yaml
index 863be5b88530e85d95930e45e2b24bb2a8a0b21b..7041838f504bf434de46ffc35df18e26a6499cb0 100644
--- a/infrastructure/system-upgrades/kubernetes.yaml
+++ b/infrastructure/system-upgrades/kubernetes.yaml
@@ -60,6 +60,8 @@ spec:
         operator: In
         values:
           - "35"
+      - key: node-role.kubernetes.io/control-plane
+        operator: Exists
   serviceAccountName: system-upgrade
   secrets:
     - name: kubernetes-upgrade