Mohammed Naser

Something that helped us a bit is the patch above, but we're still seeing this heavily. When running `tcpdump`, I see a whole load of `AF_NETLINK` traffic.

I think the issue with this is that when/if the cluster is upgraded, the configuration will get wiped.. no?

> The pre/postKubeadmCommands run for an upgrade the same as they do for cluster initialization so kustomize modifies the kube-apiserver.yaml manifest to add the auth webhook. Perfect, alright, so that...

@greenpau do you think you could land this if possible? :)

No worries. We have started something similar that is built on libovsdb here -- https://github.com/vexxhost/ovs_exporter