diff --git a/apps/system/vpn/daemonset.yaml b/apps/system/vpn/daemonset.yaml
index 24b58e4..00a6c19 100644
--- a/apps/system/vpn/daemonset.yaml
+++ b/apps/system/vpn/daemonset.yaml
@@ -20,7 +20,8 @@ spec:
             nodeSelectorTerms:
             - matchExpressions:
               - key: vpn
-                operator: Exists
+                operator: In
+                values: ["enabled"]
       volumes:
         - name: vpn-conf
           configMap: