diff --git a/kernel-extra.config b/kernel-extra.config
index 87398b2..519e9bf 100644
--- a/kernel-extra.config
+++ b/kernel-extra.config
@@ -208,6 +208,14 @@ CONFIG_IP_SET=m
 # Security / sandboxing
 ###############################################################################
 
+# Base security framework (Required for Kubernetes security policies)
+CONFIG_SECURITY=y
+
+# IPsec XFRM routing support (Required for Kubernetes overlay networking like Flannel/Cilium)
+CONFIG_XFRM=y
+CONFIG_XFRM_USER=y
+CONFIG_XFRM_ALGO=y
+
 CONFIG_SECCOMP=y
 CONFIG_SECCOMP_FILTER=y