diff --git a/k8s/yamls/qa-rally.yaml b/k8s/yamls/qa-rally.yaml
index 86ec4e4..fc7c1bf 100644
--- a/k8s/yamls/qa-rally.yaml
+++ b/k8s/yamls/qa-rally.yaml
@@ -76,6 +76,8 @@
       readOnly: true
       subPath: ca_bundle
   dnsPolicy: ClusterFirst
+  nodeSelector:
+    openstack-control-plane: enabled
   volumes:
   - emptyDir: {}
     name: pod-tmp
diff --git a/k8s/yamls/qa-toolset-bare.yaml b/k8s/yamls/qa-toolset-bare.yaml
index c46cd31..80d02c8 100644
--- a/k8s/yamls/qa-toolset-bare.yaml
+++ b/k8s/yamls/qa-toolset-bare.yaml
@@ -10,7 +10,7 @@
     - infinity
     imagePullPolicy: IfNotPresent
     name: toolset
-    image: registry.mirantis.com/professional-services-qa/toolset:25.1-caracal
+    image: registry.mirantis.com/professional-services-qa/toolset:25.2-epoxy
   dnsPolicy: ClusterFirst
   volumes:
   - emptyDir: {}
diff --git a/k8s/yamls/qa-toolset.yaml b/k8s/yamls/qa-toolset.yaml
index c49385d..9ed537e 100644
--- a/k8s/yamls/qa-toolset.yaml
+++ b/k8s/yamls/qa-toolset.yaml
@@ -67,7 +67,7 @@
       value: /etc/ssl/certs/openstack-ca-bundle.pem
     imagePullPolicy: IfNotPresent
     name: toolset
-    image: registry.mirantis.com/professional-services-qa/toolset:25.1-caracal
+    image: registry.mirantis.com/professional-services-qa/toolset:25.2-epoxy
     volumeMounts:
     - mountPath: /artifacts
       name: qa-pv-a
@@ -76,6 +76,8 @@
       readOnly: true
       subPath: ca_bundle
   dnsPolicy: ClusterFirst
+  nodeSelector:
+    openstack-control-plane: enabled
   volumes:
   - emptyDir: {}
     name: pod-tmp