diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content
index 87c5dbadeb..271a72a77f 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_cluster-completed.spec_content
@@ -57,7 +57,7 @@ spec:
   karpenter:
     cpuRequest: 100m
     enabled: true
-    image: public.ecr.aws/karpenter/controller:v0.30.0
+    image: public.ecr.aws/karpenter/controller:v0.31.3
     logEncoding: console
     logLevel: debug
     memoryLimit: 2Gi
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
index ad6fa6dc34..ccd026ee00 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-bootstrap_content
@@ -120,7 +120,7 @@ spec:
     version: 9.99.0
   - id: k8s-1.19
     manifest: karpenter.sh/k8s-1.19.yaml
-    manifestHash: 4d98502de7554ba20b42fd19517a874e79df1db60336e72d9ecfefaa5e980c78
+    manifestHash: 09f06376ef7bfcb706ec648daadae641bf9650d7ab10b6b58d7cd33c0c224867
     name: karpenter.sh
     prune:
       kinds:
diff --git a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-karpenter.sh-k8s-1.19_content b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-karpenter.sh-k8s-1.19_content
index 7d771070ba..e6fbe2881b 100644
--- a/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-karpenter.sh-k8s-1.19_content
+++ b/tests/integration/update_cluster/karpenter/data/aws_s3_object_minimal.example.com-addons-karpenter.sh-k8s-1.19_content
@@ -1076,8 +1076,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1099,8 +1099,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1116,8 +1116,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-cert
   namespace: kube-system
@@ -1159,8 +1159,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: config-logging
   namespace: kube-system
@@ -1191,8 +1191,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-global-settings
   namespace: kube-system
@@ -1208,8 +1208,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
   name: karpenter-admin
@@ -1251,8 +1251,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-core
 rules:
@@ -1376,8 +1376,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
 rules:
@@ -1425,8 +1425,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-core
 roleRef:
@@ -1449,8 +1449,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
 roleRef:
@@ -1473,8 +1473,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1552,8 +1552,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-dns
   namespace: kube-system
@@ -1578,8 +1578,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-lease
   namespace: kube-node-lease
@@ -1610,8 +1610,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1635,8 +1635,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-dns
   namespace: kube-system
@@ -1660,8 +1660,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter-lease
   namespace: kube-node-lease
@@ -1685,8 +1685,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1716,8 +1716,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: karpenter
   namespace: kube-system
@@ -1796,7 +1796,7 @@ spec:
           value: arn:aws-test:iam::123456789012:role/karpenter.kube-system.sa.minimal.example.com
         - name: AWS_WEB_IDENTITY_TOKEN_FILE
           value: /var/run/secrets/amazonaws.com/token
-        image: public.ecr.aws/karpenter/controller:v0.30.0
+        image: public.ecr.aws/karpenter/controller:v0.31.3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -1833,6 +1833,11 @@ spec:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+          runAsGroup: 65536
+          runAsNonRoot: true
+          runAsUser: 65536
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /var/run/secrets/amazonaws.com/
           name: token-amazonaws-com
@@ -1840,12 +1845,7 @@ spec:
       dnsPolicy: Default
       priorityClassName: system-cluster-critical
       securityContext:
-        fsGroup: 65536
-        runAsGroup: 65536
-        runAsNonRoot: true
-        runAsUser: 65536
-        seccompProfile:
-          type: RuntimeDefault
+        fsGroup: 10001
       serviceAccountName: karpenter
       tolerations:
       - key: node-role.kubernetes.io/master
@@ -1883,8 +1883,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: defaulting.webhook.karpenter.k8s.aws
 webhooks:
@@ -1932,8 +1932,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: validation.webhook.karpenter.sh
 webhooks:
@@ -1970,8 +1970,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: validation.webhook.config.karpenter.sh
 webhooks:
@@ -2000,8 +2000,8 @@ metadata:
     app.kubernetes.io/instance: karpenter
     app.kubernetes.io/managed-by: kops
     app.kubernetes.io/name: karpenter
-    app.kubernetes.io/version: 0.30.0
-    helm.sh/chart: karpenter-v0.30.0
+    app.kubernetes.io/version: 0.31.3
+    helm.sh/chart: karpenter-v0.31.3
     k8s-addon: karpenter.sh
   name: validation.webhook.karpenter.k8s.aws
 webhooks: