diff --git a/agents.tf b/agents.tf
index c21cdf0..0242a0d 100644
--- a/agents.tf
+++ b/agents.tf
@@ -59,7 +59,7 @@ resource "hcloud_server" "agents" {
       kubelet-arg   = "cloud-provider=external"
       flannel-iface = "eth1"
       node-ip       = cidrhost(hcloud_network_subnet.k3s.ip_range, 257 + count.index)
-      node-label    = var.automatically_upgrade_k3s ? ["k3s_upgrade=true"] : []
+      node-label    = var.automatically_upgrade_k3s ? ["k3s-upgrade=true"] : []
     })
     destination = "/tmp/config.yaml"
   }
diff --git a/master.tf b/master.tf
index 19272fd..d1ec8b7 100644
--- a/master.tf
+++ b/master.tf
@@ -61,7 +61,7 @@ resource "hcloud_server" "first_control_plane" {
       advertise-address        = local.first_control_plane_network_ip
       token                    = random_password.k3s_token.result
       node-taint               = var.allow_scheduling_on_control_plane ? [] : ["node-role.kubernetes.io/master:NoSchedule"]
-      node-label               = var.automatically_upgrade_k3s ? ["k3s_upgrade=true"] : []
+      node-label               = var.automatically_upgrade_k3s ? ["k3s-upgrade=true"] : []
     })
     destination = "/tmp/config.yaml"
   }
diff --git a/servers.tf b/servers.tf
index 7092847..65294c2 100644
--- a/servers.tf
+++ b/servers.tf
@@ -64,7 +64,7 @@ resource "hcloud_server" "control_planes" {
       advertise-address        = cidrhost(hcloud_network_subnet.k3s.ip_range, 3 + count.index)
       tls-san                  = cidrhost(hcloud_network_subnet.k3s.ip_range, 3 + count.index)
       node-taint               = var.allow_scheduling_on_control_plane ? [] : ["node-role.kubernetes.io/master:NoSchedule"]
-      node-label               = var.automatically_upgrade_k3s ? ["k3s_upgrade=true"] : []
+      node-label               = var.automatically_upgrade_k3s ? ["k3s-upgrade=true"] : []
     })
     destination = "/tmp/config.yaml"
   }