diff --git a/controllerconfig/controllerconfig/upgrade-scripts/65-k8s-app-upgrade.sh b/controllerconfig/controllerconfig/upgrade-scripts/65-k8s-app-upgrade.sh
index b4a987a247..722cbda6ac 100644
--- a/controllerconfig/controllerconfig/upgrade-scripts/65-k8s-app-upgrade.sh
+++ b/controllerconfig/controllerconfig/upgrade-scripts/65-k8s-app-upgrade.sh
@@ -92,7 +92,9 @@ if [ "$ACTION" == "activate" ]; then
         #       fluxcd application upgrade is supported
         if [[ "${UPGRADE_APP_NAME}" =~ ^(platform-integ-apps|nginx-ingress-controller|snmp|metrics-server|auditd|ptp-notification|istio)$ ]]; then
             log "$NAME: ${UPGRADE_APP_NAME} is a supported platform application."
-        elif [[ "${UPGRADE_APP_NAME}" =~ ^(cert-manager|oidc-auth-apps)$ && ( "$FROM_RELEASE" == "22.06" || "$FROM_RELEASE" == "21.12" ) ]]; then
+        elif [[ "${UPGRADE_APP_NAME}" =~ ^(cert-manager)$ && ( "$FROM_RELEASE" == "22.06" || "$FROM_RELEASE" == "21.12" ) ]]; then
+            log "$NAME: ${UPGRADE_APP_NAME} is a supported platform application from $FROM_RELEASE."
+        elif [[ "${UPGRADE_APP_NAME}" =~ ^(oidc-auth-apps)$ && ( "$FROM_RELEASE" == "22.06" ) ]]; then
             log "$NAME: ${UPGRADE_APP_NAME} is a supported platform application from $FROM_RELEASE."
         elif [[ "${UPGRADE_APP_NAME}" =~ ^(cert-manager|oidc-auth-apps)$ ]]; then
             log "$NAME: ${UPGRADE_APP_NAME} is handled by another script."