diff --git a/roles/kube-master/tasks/main.yml b/roles/kube-master/tasks/main.yml
index e5f2d2f..51bbff0 100644
--- a/roles/kube-master/tasks/main.yml
+++ b/roles/kube-master/tasks/main.yml
@@ -57,6 +57,20 @@
     regexp: '10\.244\.0\.0/16'
     replace: '192.168.3.0/16'
 
+- name: Injeta configuração defensiva no ConfigMap
+  ansible.builtin.replace:
+    path: "{{ flannel_manifest_local }}"
+    regexp: 'net-conf.json: \|[\s\S]+?\n\s+\}'
+    replace: |
+      net-conf.json: |
+        {
+          "Network": "192.168.3.0/16",
+          "Backend": {
+            "Type": "vxlan"
+          },
+          "Interface": "eth1"
+        }
+
 - name: cat flannel
   shell: |
     cat /tmp/kube-flannel.yml