From d83a63aad5b2b44e1458a0da47871b8382d089aac053c51133ce6a7b084326ac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=96=9F=E9=85=8C=20=E9=B5=AC=E5=85=84?= <tgckpg@gmail.com>
Date: Fri, 1 May 2026 21:01:37 +0800
Subject: [PATCH] Added missing parent kconfig

---
 kernel-extra.config | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kernel-extra.config b/kernel-extra.config
index 87398b2..519e9bf 100644
--- a/kernel-extra.config
+++ b/kernel-extra.config
@@ -208,6 +208,14 @@ CONFIG_IP_SET=m
 # Security / sandboxing
 ###############################################################################
 
+# Base security framework (Required for Kubernetes security policies)
+CONFIG_SECURITY=y
+
+# IPsec XFRM routing support (Required for Kubernetes overlay networking like Flannel/Cilium)
+CONFIG_XFRM=y
+CONFIG_XFRM_USER=y
+CONFIG_XFRM_ALGO=y
+
 CONFIG_SECCOMP=y
 CONFIG_SECCOMP_FILTER=y