diff --git a/templates/master/01-master-kubelet/_base/files/kubelet.yaml b/templates/master/01-master-kubelet/_base/files/kubelet.yaml
index b1d7f695ec..0c679bf581 100644
--- a/templates/master/01-master-kubelet/_base/files/kubelet.yaml
+++ b/templates/master/01-master-kubelet/_base/files/kubelet.yaml
@@ -28,6 +28,10 @@ contents:
     nodeStatusUpdateFrequency: 10s
     nodeStatusReportFrequency: 5m
     serverTLSBootstrap: true
+    systemReservedCgroup: "/system.slice"
+    enforceNodeAllocatable:
+      - pods
+      - system-reserved-compressible
     tlsMinVersion: {{.TLSMinVersion}}
     tlsCipherSuites:
       {{- range .TLSCipherSuites }}
diff --git a/templates/worker/01-worker-kubelet/_base/files/kubelet.yaml b/templates/worker/01-worker-kubelet/_base/files/kubelet.yaml
index b1d7f695ec..0c679bf581 100644
--- a/templates/worker/01-worker-kubelet/_base/files/kubelet.yaml
+++ b/templates/worker/01-worker-kubelet/_base/files/kubelet.yaml
@@ -28,6 +28,10 @@ contents:
     nodeStatusUpdateFrequency: 10s
     nodeStatusReportFrequency: 5m
     serverTLSBootstrap: true
+    systemReservedCgroup: "/system.slice"
+    enforceNodeAllocatable:
+      - pods
+      - system-reserved-compressible
     tlsMinVersion: {{.TLSMinVersion}}
     tlsCipherSuites:
       {{- range .TLSCipherSuites }}