diff --git a/flux2/apps/velero/release.yaml b/flux2/apps/velero/release.yaml
index bdb6d4b7dbe9029143875f732172a4661fa43b82..3bd3a0eec9a0b5861d61026d3a5ddbc7aea04f62 100644
--- a/flux2/apps/velero/release.yaml
+++ b/flux2/apps/velero/release.yaml
@@ -15,6 +15,8 @@ spec:
         kind: HelmRepository
         name: vmware-tanzu
         namespace: flux-system
+  upgrade:
+    crds: CreateReplace
   interval: 1h
   valuesFrom:
     - kind: ConfigMap
diff --git a/flux2/core/base/cert-manager/release.yaml b/flux2/core/base/cert-manager/release.yaml
index 5ec6c473432a4e342a691a14bed8f5976ced5c6d..991905f179205bb82da049dcbd0c5d53ca014862 100644
--- a/flux2/core/base/cert-manager/release.yaml
+++ b/flux2/core/base/cert-manager/release.yaml
@@ -15,6 +15,8 @@ spec:
         kind: HelmRepository
         name: jetstack
         namespace: flux-system
+  upgrade:
+    crds: CreateReplace
   interval: 1h0m0s
   install:
     remediation:
diff --git a/flux2/core/base/single-sign-on/release.yaml b/flux2/core/base/single-sign-on/release.yaml
index 3d8ea129fed24704f8d2209526f1700bf53b98f6..02aefb7bf86fb14079fa560aecf22a64d30ab1db 100644
--- a/flux2/core/base/single-sign-on/release.yaml
+++ b/flux2/core/base/single-sign-on/release.yaml
@@ -20,6 +20,8 @@ spec:
     remediation:
       retries: 3
     timeout: 10m
+  upgrade:
+    crds: CreateReplace
   valuesFrom:
     - kind: ConfigMap
       name: stackspin-single-sign-on-values