diff --git a/clustertool/embed/generic/kubernetes/core/system-upgrade-controller-plans/app/talos.yaml b/clustertool/embed/generic/kubernetes/core/system-upgrade-controller-plans/app/talos.yaml
index 5cd2f2299b6..0e36b4feeb1 100644
--- a/clustertool/embed/generic/kubernetes/core/system-upgrade-controller-plans/app/talos.yaml
+++ b/clustertool/embed/generic/kubernetes/core/system-upgrade-controller-plans/app/talos.yaml
@@ -3,7 +3,6 @@ apiVersion: upgrade.cattle.io/v1
 kind: Plan
 metadata:
   name: talos
-  namespace: system-upgrade
 spec:
   version: ${TALOS_VERSION}
   serviceAccountName: system-upgrade
@@ -15,6 +14,9 @@ spec:
   exclusive: true
   nodeSelector:
     matchExpressions:
+      - key: kubernetes.io/os
+        operator: In
+        values: ["linux"]
       - key: feature.node.kubernetes.io/system-os_release.ID
         operator: In
         values: ["talos"]
@@ -27,27 +29,27 @@ spec:
     - key: node-role.kubernetes.io/control-plane
       operator: Exists
       effect: NoSchedule
-  prepare: &prepare
+  prepare:
     image: ghcr.io/siderolabs/talosctl:${TALOS_VERSION}
     envs:
       - name: NODE_IP
         valueFrom:
           fieldRef:
             fieldPath: status.hostIP
-      - name: SCHEMATIC
-        valueFrom:
-          fieldRef:
-            fieldPath: metadata.annotations['extensions.talos.dev/schematic']
     args:
       - --nodes=$(NODE_IP)
       - health
       - --server=false
   upgrade:
-    <<: *prepare
+    image: ghcr.io/jfroy/tnu:0.3.0
+    envs:
+      - name: NODE
+        valueFrom:
+          fieldRef:
+            fieldPath: spec.nodeName
     args:
-      - --nodes=$(NODE_IP)
-      - upgrade
-      - --image=factory.talos.dev/installer/$(SCHEMATIC):$(SYSTEM_UPGRADE_PLAN_LATEST_VERSION)
-      - --preserve=true
-      - --wait=false
-      - --force
+      - --node=$(NODE)
+      - --tag=$(SYSTEM_UPGRADE_PLAN_LATEST_VERSION)
+      - --powercycle
+
+