diff --git a/files/etc/kubernetes/psa.yaml b/files/etc/kubernetes/psa.yaml
index fe13d52..b2c6f65 100644
--- a/files/etc/kubernetes/psa.yaml
+++ b/files/etc/kubernetes/psa.yaml
@@ -15,7 +15,7 @@ plugins:
     exemptions:
       usernames: []
       runtimeClasses: []
-      namespaces: [kube-system, cis-operator-system]
+      namespaces: [kube-system, system-upgrade, cis-operator-system]
 - name: EventRateLimit
   configuration:
     apiVersion: eventratelimit.admission.k8s.io/v1alpha1