diff --git a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
index 25914319..0775abc4 100644
--- a/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
+++ b/kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
@@ -12,6 +12,12 @@ spec:
   cordon: true
   nodeSelector:
     matchExpressions:
-      - {key: node-role.kubernetes.io/control-plane, operator: Exists}
+      - { key: node-role.kubernetes.io/control-plane, operator: Exists }
+  tolerations:
+    - { effect: NoSchedule, operator: Exists }
+    - { effect: NoExecute, operator: Exists }
+    - { key: node-role.kubernetes.io/control-plane, effect: NoSchedule, operator: Exists }
+    - { key: node-role.kubernetes.io/etcd, effect: NoExecute, operator: Exists }
+    - { key: CriticalAddonsOnly, operator: Exists }
   upgrade:
     image: rancher/k3s-upgrade