diff --git a/classes/cluster/k8s-ha-calico/kubernetes/control.yml b/classes/cluster/k8s-ha-calico/kubernetes/control.yml
index 23d4da7..c57e955 100644
--- a/classes/cluster/k8s-ha-calico/kubernetes/control.yml
+++ b/classes/cluster/k8s-ha-calico/kubernetes/control.yml
@@ -65,3 +65,5 @@
       namespace:
         netchecker:
           enabled: true
+      auth:
+        mode: Node,RBAC