diff --git a/roles/paas-kubernetes/network/files/calico.conf b/roles/paas-kubernetes/network/files/calico.conf
new file mode 100644
--- /dev/null
+++ b/roles/paas-kubernetes/network/files/calico.conf
@@ -0,0 +1,17 @@
+#   -------------------------------------------------------------
+#   Kubernetes configuration - Calico
+#   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+#   Project:        Nasqueron
+#   License:        Trivial work, not eligible to copyright
+#   Source file:    roles/paas-kubernetes/network/files/calico.conf
+#   -------------------------------------------------------------
+#
+#   <auto-generated>
+#       This file is managed by our rOPS SaltStack repository.
+#
+#       Changes to this file may cause incorrect behavior
+#       and will be lost if the state is redeployed.
+#   </auto-generated>
+
+[keyfile]
+unmanaged-devices=interface-name:cali*;interface-name:tunl*;interface-name:vxlan.calico
diff --git a/roles/paas-kubernetes/network/init.sls b/roles/paas-kubernetes/network/init.sls
--- a/roles/paas-kubernetes/network/init.sls
+++ b/roles/paas-kubernetes/network/init.sls
@@ -8,3 +8,4 @@
 
 include:
   - .br_netfilter
+  - .networkmanager
diff --git a/roles/paas-kubernetes/network/init.sls b/roles/paas-kubernetes/network/networkmanager.sls
copy from roles/paas-kubernetes/network/init.sls
copy to roles/paas-kubernetes/network/networkmanager.sls
--- a/roles/paas-kubernetes/network/init.sls
+++ b/roles/paas-kubernetes/network/networkmanager.sls
@@ -2,9 +2,11 @@
 #   Salt — Kubernetes
 #   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 #   Project:        Nasqueron
-#   Created:        2020-09-20
+#   Created:        2020-09-22
 #   License:        Trivial work, not eligible to copyright
 #   -------------------------------------------------------------
 
-include:
-  - .br_netfilter
+/etc/NetworkManager/conf.d/calico.conf:
+  file.managed:
+    - source: salt://roles/paas-kubernetes/network/files/calico.conf
+    - makedirs: True