diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index f4f48d543..1f0479200 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -68,6 +68,7 @@
     - { role: kubernetes/master, tags: master }
     - { role: network_plugin, tags: network }
     - { role: upgrade/post-upgrade, tags: post-upgrade }
+    - { role: kubernetes-apps/network_plugin, tags: network }
 
 #Finally handle worker upgrades, based on given batch size
 - hosts: kube-node:!kube-master
@@ -79,7 +80,6 @@
     - { role: kubernetes/node, tags: node }
     - { role: network_plugin, tags: network }
     - { role: upgrade/post-upgrade, tags: post-upgrade }
-    - { role: kubernetes-apps/network_plugin, tags: network }
 
 - hosts: calico-rr
   any_errors_fatal: true