diff --git a/apps/system/kured.yaml b/apps/system/kured.yaml
index 0a4e2f0..9bf28d8 100644
--- a/apps/system/kured.yaml
+++ b/apps/system/kured.yaml
@@ -29,3 +29,8 @@ spec:
           endTime: "06:00" # 6:00 AM
           annotateNodes: true
           # rebootDays: ["mo", "tu", "we", "th", "fr", "sa", "su"]
+          tolerations:
+            # allow kured to run on control-plane nodes
+            - key: "node-role.kubernetes.io"
+              operator: "Exists"
+              effect: "NoSchedule"