Once an upgrade has started the Onload Operator attempts to perform the upgrade on all nodes that match its selector. Therefore it is not currently possible to freeze a node in place while others are upgraded. If you want to have heterogeneous Onload versions in the same cluster, you must have multiple Onload CRs with non-overlapping node selectors, and upgrade each of these separately.