diff --git a/upgrade-cluster.yml b/upgrade-cluster.yml
index 47835ff90..2823f050d 100644
--- a/upgrade-cluster.yml
+++ b/upgrade-cluster.yml
@@ -105,6 +105,7 @@
   roles:
     - { role: kubespray-defaults}
     - { role: kubernetes-apps/rotate_tokens, tags: rotate_tokens, when: "secret_changed|default(false)" }
+    - { role: win_nodes/kubernetes_patch, tags: ["master", "win_nodes"]}
 
 - hosts: calico-rr
   any_errors_fatal: "{{ any_errors_fatal | default(true) }}"