diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index c4e1fa4c6..35064ec60 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -153,6 +153,8 @@
   environment: "{{ proxy_disable_env }}"
   roles:
     - { role: kubespray-defaults }
+    - { role: kubernetes-apps/ingress_controller, tags: ingress-controller }
+    - { role: kubernetes-apps/external_provisioner, tags: external-provisioner }
     - { role: kubernetes-apps, tags: apps }
 
 - name: Apply resolv.conf changes now that cluster DNS is up