diff --git a/kernel-ch/k8s_additions.config b/kernel-ch/k8s_additions.config
index 773877f..1e6db86 100644
--- a/kernel-ch/k8s_additions.config
+++ b/kernel-ch/k8s_additions.config
@@ -22,7 +22,7 @@ CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
 CONFIG_NETFILTER_XT_MATCH_IPVS=y
 CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
 CONFIG_IP_NF_NAT=y
-CONFIG_IP_VS=n
+CONFIG_IP_VS=y
 CONFIG_IP_VS_NFCT=y
 CONFIG_IP_VS_PROTO_TCP=y
 CONFIG_IP_VS_PROTO_UDP=y
@@ -43,90 +43,8 @@ CONFIG_NF_CONNTRACK_EVENTS=y
 CONFIG_NF_CONNTRACK_TIMEOUT=y
 CONFIG_NF_CONNTRACK_TIMESTAMP=y
 CONFIG_NF_CONNTRACK_LABELS=y
-CONFIG_NF_CT_PROTO_DCCP=n
-CONFIG_NF_CT_PROTO_SCTP=n
-CONFIG_NF_CT_PROTO_UDPLITE=n
-CONFIG_NF_CONNTRACK_AMANDA=n
-CONFIG_NF_CONNTRACK_FTP=n
-CONFIG_NF_CONNTRACK_H323=n
-CONFIG_NF_CONNTRACK_IRC=n
-CONFIG_NF_CONNTRACK_NETBIOS_NS=n
-CONFIG_NF_CONNTRACK_SNMP=n
-CONFIG_NF_CONNTRACK_PPTP=n
-CONFIG_NF_CONNTRACK_SANE=n
-CONFIG_NF_CONNTRACK_SIP=n
-CONFIG_NF_CONNTRACK_TFTP=n
-CONFIG_NF_CT_NETLINK=n
-CONFIG_NF_CT_NETLINK_TIMEOUT=n
-CONFIG_NF_TABLES=n
 CONFIG_NETFILTER_XT_CONNMARK=y
 CONFIG_NETFILTER_XT_SET=y
-CONFIG_NETFILTER_XT_TARGET_AUDIT=n
-CONFIG_NETFILTER_XT_TARGET_CLASSIFY=n
-CONFIG_NETFILTER_XT_TARGET_CONNMARK=n
-CONFIG_NETFILTER_XT_TARGET_HMARK=n
-CONFIG_NETFILTER_XT_TARGET_IDLETIMER=n
-CONFIG_NETFILTER_XT_TARGET_LOG=n
-CONFIG_NETFILTER_XT_NAT=n
-CONFIG_NETFILTER_XT_TARGET_NETMAP=n
-CONFIG_NETFILTER_XT_TARGET_NFLOG=n
-CONFIG_NETFILTER_XT_TARGET_NFQUEUE=n
-CONFIG_NETFILTER_XT_TARGET_RATEEST=n
-CONFIG_NETFILTER_XT_TARGET_MASQUERADE=n
-CONFIG_NETFILTER_XT_TARGET_TEE=n
-CONFIG_NETFILTER_XT_TARGET_TCPMSS=n
-CONFIG_NETFILTER_XT_MATCH_BPF=n
-CONFIG_NETFILTER_XT_MATCH_CGROUP=n
-CONFIG_NETFILTER_XT_MATCH_CLUSTER=n
-CONFIG_NETFILTER_XT_MATCH_CONNBYTES=n
-CONFIG_NETFILTER_XT_MATCH_CONNLABEL=n
-CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=n
-CONFIG_NETFILTER_XT_MATCH_CONNMARK=n
-CONFIG_NETFILTER_XT_MATCH_CPU=n
-CONFIG_NETFILTER_XT_MATCH_DCCP=n
-CONFIG_NETFILTER_XT_MATCH_DEVGROUP=n
-CONFIG_NETFILTER_XT_MATCH_DSCP=n
-CONFIG_NETFILTER_XT_MATCH_ECN=n
-CONFIG_NETFILTER_XT_MATCH_ESP=n
-CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=n
-CONFIG_NETFILTER_XT_MATCH_HELPER=n
-CONFIG_NETFILTER_XT_MATCH_HL=n
-CONFIG_NETFILTER_XT_MATCH_IPCOMP=n
-CONFIG_NETFILTER_XT_MATCH_IPRANGE=n
-CONFIG_NETFILTER_XT_MATCH_L2TP=n
-CONFIG_NETFILTER_XT_MATCH_LENGTH=n
-CONFIG_NETFILTER_XT_MATCH_LIMIT=n
-CONFIG_NETFILTER_XT_MATCH_MAC=n
-CONFIG_NETFILTER_XT_MATCH_MARK=n
-CONFIG_NETFILTER_XT_MATCH_NFACCT=n
-CONFIG_NETFILTER_XT_MATCH_OSF=n
-CONFIG_NETFILTER_XT_MATCH_OSF=n
-CONFIG_NETFILTER_XT_MATCH_OWNER=n
-CONFIG_NETFILTER_XT_MATCH_POLICY=n
-CONFIG_NETFILTER_XT_MATCH_PHYSDEV=n
-CONFIG_NETFILTER_XT_MATCH_PKTTYPE=n
-CONFIG_NETFILTER_XT_MATCH_QUOTA=n
-CONFIG_NETFILTER_XT_MATCH_RATEEST=n
-CONFIG_NETFILTER_XT_MATCH_REALM=n
-CONFIG_NETFILTER_XT_MATCH_RECENT=n
-CONFIG_NETFILTER_XT_MATCH_SCTP=n
-CONFIG_NETFILTER_XT_MATCH_SOCKET=n
-CONFIG_NETFILTER_XT_MATCH_STATE=n
-CONFIG_NETFILTER_XT_MATCH_STATISTIC=n
-CONFIG_NETFILTER_XT_MATCH_STRING=n
-CONFIG_NETFILTER_XT_MATCH_TCPMSS=n
-CONFIG_NETFILTER_XT_MATCH_TIME=n
-CONFIG_NETFILTER_XT_MATCH_U32=n
-CONFIG_NF_SOCKET_IPV4=y
-CONFIG_NF_TPROXY_IPV4=n
-CONFIG_NF_DUP_IPV4=n
-CONFIG_NF_LOG_ARP=n
-CONFIG_NF_LOG_IPV4=n
-CONFIG_NF_REJECT_IPV4=n
-CONFIG_IP_NF_IPTABLES=n
-CONFIG_IP_NF_ARPTABLES=n
 CONFIG_NF_CONNTRACK_BRIDGE=y
-CONFIG_BRIDGE_NF_EBTABLES=n
-CONFIG_BRIDGE_IGMP_SNOOPING=n
-CONFIG_BRIDGE_MRP=n
-CONFIG_BRIDGE_CFM=n
+CONFIG_NET_CLS_CGROUP=y
+