diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index c4e1fa4c63dcab046c3192dc5057cf287a55693f..35064ec6057333f6480b6c76a154addee595d5ec 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -153,6 +153,8 @@
   environment: "{{ proxy_disable_env }}"
   roles:
     - { role: kubespray-defaults }
+    - { role: kubernetes-apps/ingress_controller, tags: ingress-controller }
+    - { role: kubernetes-apps/external_provisioner, tags: external-provisioner }
     - { role: kubernetes-apps, tags: apps }
 
 - name: Apply resolv.conf changes now that cluster DNS is up