diff --git a/roles/update/README.md b/roles/update/README.md
index 97f1fc1d9c..77d8e11fe1 100644
--- a/roles/update/README.md
+++ b/roles/update/README.md
@@ -21,5 +21,6 @@ Role to run update
 * `cifmw_update_ansible_ssh_private_key_file`: (String) Define the path to the private key file used for the compute nodes.
 * `cifmw_update_wait_retries_reboot`: (Integer) Number of retries to wait for a compute node reboot. One retry is done every five seconds. Default to 60, so five minutes.
 * `cifmw_update_resources_monitoring_interval`: (Integer) Interval, in seconds, between two resources monitor during update. Default to 10 seconds.
+* `cifmw_update_openstack_update_kpatch`: (Boolean) Activate kpatch during update. Default to false.
 
 ## Examples
diff --git a/roles/update/defaults/main.yml b/roles/update/defaults/main.yml
index 384f47cc07..1b93f4720e 100644
--- a/roles/update/defaults/main.yml
+++ b/roles/update/defaults/main.yml
@@ -48,6 +48,8 @@ cifmw_update_openstack_cmd: >-
   oc rsh -n {{ cifmw_update_namespace }} openstackclient openstack
 
 ## User facing
+cifmw_update_openstack_update_kpatch: false
+
 cifmw_update_reboot_test: false
 cifmw_update_ansible_ssh_private_key_file: >-
   "{{ ansible_ssh_private_key_file | default(ansible_user_dir ~ '/.ssh/id_cifw') }}"
diff --git a/roles/update/tasks/main.yml b/roles/update/tasks/main.yml
index 627475977e..5702a42bae 100644
--- a/roles/update/tasks/main.yml
+++ b/roles/update/tasks/main.yml
@@ -151,6 +151,7 @@
   ansible.builtin.set_fact:
     _make_update_params: |
       TIMEOUT: {{ cifmw_update_openstack_update_run_timeout }}
+      KPATCH_UPDATE: {{ cifmw_update_openstack_update_kpatch }}
       {% if _cifmw_update_use_fake_update | bool -%}
       FAKE_UPDATE: true
       CONTAINERS_NAMESPACE: {{ cifmw_update_openstack_update_run_containers_namespace }}