diff --git a/clusters/k8s01/system-upgrades/kustomization.yaml b/clusters/k8s01/system-upgrades/kustomization.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..519fbf78beba6c605a8a143a3e734876b309f7b0
--- /dev/null
+++ b/clusters/k8s01/system-upgrades/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: system-upgrade
+resources:
+  - registry.yaml
diff --git a/clusters/k8s01/system-upgrades/registry.yaml b/clusters/k8s01/system-upgrades/registry.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..3bbd7601d535a1f41d300fdcb68f048147f4323e
--- /dev/null
+++ b/clusters/k8s01/system-upgrades/registry.yaml
@@ -0,0 +1,134 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: crio-registry-config
+    namespace: system-upgrade
+type: Opaque
+stringData:
+    upgrade.sh: ENC[AES256_GCM,data:RqiUeZtM4uviw672/UYAbzuyi1XOIYXVtLTkRu5xZBAraphy6jVvtsXKad+we6uRpA9cbw2za6BLx96/44tNgABrqLkBsZkjYFGXOGPJP3Rf/hvC8Krt51TuJybAXghFdIBdjyec4b6mPznu9g6Df8NxTO+YnKB9YCyk7pb4Pt0oUB39yvXcDfBYfQiEQ8QkmGfX7Tag3tKy7qVEmTNdaf1Le6c=,iv:2XVmI9TbEuiPOH5lnIJppychpfAlJ61gp+QtzWT7iMQ=,tag:04/yatnkPPP/Jh+UIZaZqg==,type:str]
+    registries.conf: ENC[AES256_GCM,data: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,iv:omIYLFqxoIS/z8bZMmm7toLET6prR+vzLB0uwEp3wS4=,tag:y5nXkMarmWNTUAxxUh46eA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-01-21T21:54:23Z"
+    mac: ENC[AES256_GCM,data:QYRyRUsrtQ4ac3PtqfmZYuf2cwYTStFSB2o5Mnqta1/onKUrSrFbYe5UMgdrzN7BRM44+B6TpZeHQKN7btiy4E9qYZbquZEcpOA8+rHfUlIRn5QThPgmXrDDhd33hZVvt23vuaBpfAcic7qUPHfDjkiGC137uyYpRGJJVfV3Z9c=,iv:mU9lKh1xKRuVvoEMciDJHBDHkaptcQXMBM2kJZ7ziPs=,tag:dXJHO8mkx4WqYLppPjx+hQ==,type:str]
+    pgp:
+        - created_at: "2022-01-21T21:30:49Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAdUCu6rJrBREzmtY2qhkaqwkTVFhQlc7r8j7xkKZL90uo
+            hTnSJxlDfR5yMp7dkRiCmfi/UCeZkxX5vw5SQApXLnJnUf2HSRo+kbSBDlLiPFtZ
+            LOypVTYOlH36CVsSufcWWmuV+MUAQQ24mooCpX5IW6x5SZhsXEztaWyd7rEBtJD7
+            y498W2DBHzOavwDYQNVlco+5ED732dE9HOTiTY9SN9XJFAd0x/T/D/86RrKmtsHq
+            A35tPG2czdVUiIoUMj0vWbxxBZqkDt2dmeSIMHMJOpxGHq/+8sia6jydgeb/iU7s
+            2vR73Zw68Jq7Nav8mIa5gKXwN6XcmtpKWrzgYR7ecKbddU1RP2+0Y2TBpNgEe2rd
+            i9YOCGyr3tsp/dPXYPUp6qR0x53Vd1SVmqoqjCxJBPYWKGVUVX+drWo6UKpL8zEs
+            tYuAYb+9aL9HSXJv38P8W2142oJSDfZtL/XrzRRU2/mr/URqoHGaGAETJerfkJmO
+            DTf8CCiCemyndJtsEWtO29z32nzCE4OVfwoLhA+kLKhiYQWC0nFgXgxNBZhUkZ5b
+            TQ58hZFGnNBN5Yctp1pHcBjrnKnAADvny2sn+pc7vr5WZ4C3sFpYF+ZcncuhgRRU
+            8u5kli4q1HnEJvYpd0njkortnz8HPpx9mM8bxFTre4H4imvVjnjFjiUPQnP0yc7S
+            5gG8Z9Pci69xVKlczR+a9INOT8U61FAMMWNyVhd8FdAK6ybbvimZVs9bU45BU9Ra
+            KHxJvujd0OiX9XdW/KAFbkzkNQrRGKaJW5T9KnZIGmy70OIXkAj2AA==
+            =+4cP
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-01-21T21:30:49Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPARAAoBXcLoMDbax6XIuT42K6i6nfy7VZ3TqhKds44kHmEcyS
+            h5erFxBFrZ1ETYJ9J3A1KtGg7CTNEeiD4kKVoO3qhPYYBQsIwxx0VmQGznsm8vkB
+            6qnevOU5FpzbIMVT5fs73gSJA4kUQFrx1UPRdEXwPJjQNkidW388sCAfmBdonKrd
+            8nw68J8QbknXVfIB8CbnjMY3BMbNGStdDTKxbTHMWC0F6rqsfBbD+pKM7QuoHdGu
+            4zTjTO1u395IOji+X5/4TEtK9VLP1MMV5hxf5kj7Nk4tiR1yjph1MZ4JFdY0Poun
+            wn1BSFuMjxWxMbEMWzaWmvEE+/M3Sg4E+on9/H/CIW88lbMbB4oo5AsgHGQnK5hv
+            Elwl3/l5eKskjp0kJ2rXPs18KiTyhtTFJltJHin+NGTofMVny/0LS7uMmD4ORgJz
+            ZKnjWICw8Vh2byIyTvF8UZUYfc2DXlXLeL2tUlUOl3AL3DPTjukyUkcYX/g6gy3L
+            KaprRWNxzU43Euf5NhR+yFKgAz+rGobF2EocRybvs29/y/FXxNCu+wixLepuL4dn
+            tfe4AvBerFeB0Qf6b7NAzw5f0pMarOSqS0auYeOQEX9tbInJ1jcw86uOKbwJOvcv
+            yhRtbXKI0EJnyPeIgUJx6QxCUV7gsWUt/B8faA4rTDuEGxjnmR6+veNWlNBpRHTU
+            aAEJAhBFdZbcy1PwTbIpAipNNmpo3xyf5CVJqcPhCuNtZYBF/+TqRcVHqyIh4EQl
+            zFL5oliQePV+oe/fBWkx7ZPo9evBko0dWnx6lSJR/L/MU/tcJBij4MxCxUGTuHri
+            8ll3YUVQWxlo
+            =0Lmz
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$
+    version: 3.7.1
+---
+apiVersion: upgrade.cattle.io/v1
+kind: Plan
+metadata:
+    name: crio-registry-config
+    namespace: system-upgrade
+spec:
+    concurrency: 1
+    serviceAccountName: system-upgrade
+    secrets:
+        - name: crio-registry-config
+          path: /host/run/system-upgrade/secrets/crio-registry-config
+    version: 1.0.0
+    upgrade:
+        image: registry.shivering-isles.com/fedora/fedora:35
+        command:
+            - chroot
+            - /host
+        args:
+            - sh
+            - /run/system-upgrade/secrets/crio-registry-config/upgrade.sh
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-01-21T21:54:23Z"
+    mac: ENC[AES256_GCM,data:QYRyRUsrtQ4ac3PtqfmZYuf2cwYTStFSB2o5Mnqta1/onKUrSrFbYe5UMgdrzN7BRM44+B6TpZeHQKN7btiy4E9qYZbquZEcpOA8+rHfUlIRn5QThPgmXrDDhd33hZVvt23vuaBpfAcic7qUPHfDjkiGC137uyYpRGJJVfV3Z9c=,iv:mU9lKh1xKRuVvoEMciDJHBDHkaptcQXMBM2kJZ7ziPs=,tag:dXJHO8mkx4WqYLppPjx+hQ==,type:str]
+    pgp:
+        - created_at: "2022-01-21T21:30:49Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAdUCu6rJrBREzmtY2qhkaqwkTVFhQlc7r8j7xkKZL90uo
+            hTnSJxlDfR5yMp7dkRiCmfi/UCeZkxX5vw5SQApXLnJnUf2HSRo+kbSBDlLiPFtZ
+            LOypVTYOlH36CVsSufcWWmuV+MUAQQ24mooCpX5IW6x5SZhsXEztaWyd7rEBtJD7
+            y498W2DBHzOavwDYQNVlco+5ED732dE9HOTiTY9SN9XJFAd0x/T/D/86RrKmtsHq
+            A35tPG2czdVUiIoUMj0vWbxxBZqkDt2dmeSIMHMJOpxGHq/+8sia6jydgeb/iU7s
+            2vR73Zw68Jq7Nav8mIa5gKXwN6XcmtpKWrzgYR7ecKbddU1RP2+0Y2TBpNgEe2rd
+            i9YOCGyr3tsp/dPXYPUp6qR0x53Vd1SVmqoqjCxJBPYWKGVUVX+drWo6UKpL8zEs
+            tYuAYb+9aL9HSXJv38P8W2142oJSDfZtL/XrzRRU2/mr/URqoHGaGAETJerfkJmO
+            DTf8CCiCemyndJtsEWtO29z32nzCE4OVfwoLhA+kLKhiYQWC0nFgXgxNBZhUkZ5b
+            TQ58hZFGnNBN5Yctp1pHcBjrnKnAADvny2sn+pc7vr5WZ4C3sFpYF+ZcncuhgRRU
+            8u5kli4q1HnEJvYpd0njkortnz8HPpx9mM8bxFTre4H4imvVjnjFjiUPQnP0yc7S
+            5gG8Z9Pci69xVKlczR+a9INOT8U61FAMMWNyVhd8FdAK6ybbvimZVs9bU45BU9Ra
+            KHxJvujd0OiX9XdW/KAFbkzkNQrRGKaJW5T9KnZIGmy70OIXkAj2AA==
+            =+4cP
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+        - created_at: "2022-01-21T21:30:49Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4oYbIHZIrAPARAAoBXcLoMDbax6XIuT42K6i6nfy7VZ3TqhKds44kHmEcyS
+            h5erFxBFrZ1ETYJ9J3A1KtGg7CTNEeiD4kKVoO3qhPYYBQsIwxx0VmQGznsm8vkB
+            6qnevOU5FpzbIMVT5fs73gSJA4kUQFrx1UPRdEXwPJjQNkidW388sCAfmBdonKrd
+            8nw68J8QbknXVfIB8CbnjMY3BMbNGStdDTKxbTHMWC0F6rqsfBbD+pKM7QuoHdGu
+            4zTjTO1u395IOji+X5/4TEtK9VLP1MMV5hxf5kj7Nk4tiR1yjph1MZ4JFdY0Poun
+            wn1BSFuMjxWxMbEMWzaWmvEE+/M3Sg4E+on9/H/CIW88lbMbB4oo5AsgHGQnK5hv
+            Elwl3/l5eKskjp0kJ2rXPs18KiTyhtTFJltJHin+NGTofMVny/0LS7uMmD4ORgJz
+            ZKnjWICw8Vh2byIyTvF8UZUYfc2DXlXLeL2tUlUOl3AL3DPTjukyUkcYX/g6gy3L
+            KaprRWNxzU43Euf5NhR+yFKgAz+rGobF2EocRybvs29/y/FXxNCu+wixLepuL4dn
+            tfe4AvBerFeB0Qf6b7NAzw5f0pMarOSqS0auYeOQEX9tbInJ1jcw86uOKbwJOvcv
+            yhRtbXKI0EJnyPeIgUJx6QxCUV7gsWUt/B8faA4rTDuEGxjnmR6+veNWlNBpRHTU
+            aAEJAhBFdZbcy1PwTbIpAipNNmpo3xyf5CVJqcPhCuNtZYBF/+TqRcVHqyIh4EQl
+            zFL5oliQePV+oe/fBWkx7ZPo9evBko0dWnx6lSJR/L/MU/tcJBij4MxCxUGTuHri
+            8ll3YUVQWxlo
+            =0Lmz
+            -----END PGP MESSAGE-----
+          fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$
+    version: 3.7.1