diff --git a/google-cloud/fedora-coreos/kubernetes/controllers.tf b/google-cloud/fedora-coreos/kubernetes/controllers.tf
index 3ae436b3..8c0510b3 100644
--- a/google-cloud/fedora-coreos/kubernetes/controllers.tf
+++ b/google-cloud/fedora-coreos/kubernetes/controllers.tf
@@ -56,6 +56,7 @@ resource "google_compute_instance" "controllers" {
   }
 
   can_ip_forward = true
+  allow_stopping_for_update = true
   tags           = ["${var.cluster_name}-controller"]
 
   lifecycle {
diff --git a/google-cloud/flatcar-linux/kubernetes/controllers.tf b/google-cloud/flatcar-linux/kubernetes/controllers.tf
index b9233051..6de8fcfb 100644
--- a/google-cloud/flatcar-linux/kubernetes/controllers.tf
+++ b/google-cloud/flatcar-linux/kubernetes/controllers.tf
@@ -33,6 +33,7 @@ resource "google_compute_instance" "controllers" {
   # use a zone in the region and wrap around (e.g. controllers > zones)
   zone         = element(local.zones, count.index)
   machine_type = var.controller_type
+  allow_stopping_for_update = true
 
   metadata = {
     user-data = data.ct_config.controllers.*.rendered[count.index]