diff --git a/config/default/aad-pod-identity-deployment.yaml b/config/default/aad-pod-identity-deployment.yaml
index 76abbccbc33..cdfb1eefa92 100644
--- a/config/default/aad-pod-identity-deployment.yaml
+++ b/config/default/aad-pod-identity-deployment.yaml
@@ -263,6 +263,11 @@ spec:
         component: nmi
         tier: node
     spec:
+      tolerations:
+        - effect: NoSchedule
+          key: node-role.kubernetes.io/master
+        - effect: NoSchedule
+          key: node-role.kubernetes.io/control-plane
       serviceAccountName: manager
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet