diff --git a/addons/cluo/cluster-role.yaml b/addons/cluo/cluster-role.yaml
index 8c041860..79f8d6d1 100644
--- a/addons/cluo/cluster-role.yaml
+++ b/addons/cluo/cluster-role.yaml
@@ -15,7 +15,7 @@ rules:
   - apiGroups:
       - ""
     resources:
-      - endpoints
+      - configmaps
     verbs:
       - create
       - get
diff --git a/addons/cluo/update-agent.yaml b/addons/cluo/update-agent.yaml
index 31313b39..152061b6 100644
--- a/addons/cluo/update-agent.yaml
+++ b/addons/cluo/update-agent.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: update-agent
-        image: quay.io/coreos/container-linux-update-operator:v0.3.1
+        image: quay.io/coreos/container-linux-update-operator:v0.4.0
         command:
         - "/bin/update-agent"
         volumeMounts:
diff --git a/addons/cluo/update-operator.yaml b/addons/cluo/update-operator.yaml
index 40713d20..4d69923f 100644
--- a/addons/cluo/update-operator.yaml
+++ b/addons/cluo/update-operator.yaml
@@ -12,12 +12,15 @@ spec:
     spec:
       containers:
       - name: update-operator
-        image: quay.io/coreos/container-linux-update-operator:v0.3.1
+        image: quay.io/coreos/container-linux-update-operator:v0.4.0
         command:
         - "/bin/update-operator"
-        - "--analytics=false"
         env:
         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+      tolerations:
+      - key: node-role.kubernetes.io/master
+        operator: Exists
+        effect: NoSchedule