diff --git a/cluster/juju/charms/trusty/kubernetes-master/files/apiserver.upstart.tmpl b/cluster/juju/charms/trusty/kubernetes-master/files/apiserver.upstart.tmpl
index 40d9849eb0d..a171f29c27f 100644
--- a/cluster/juju/charms/trusty/kubernetes-master/files/apiserver.upstart.tmpl
+++ b/cluster/juju/charms/trusty/kubernetes-master/files/apiserver.upstart.tmpl
@@ -8,6 +8,7 @@ limit nofile 20000 20000
 kill timeout 30 # wait 30s between SIGTERM and SIGKILL.
 
 exec /usr/local/bin/apiserver \
+     --allow-privileged=true \
      --basic-auth-file=/srv/kubernetes/basic-auth.csv \
      --bind-address=%(api_private_address)s \
      --etcd-servers=%(etcd_servers)s \
diff --git a/cluster/juju/charms/trusty/kubernetes/files/kubelet.upstart.tmpl b/cluster/juju/charms/trusty/kubernetes/files/kubelet.upstart.tmpl
index 5b8dc39d50f..d2866fe625e 100644
--- a/cluster/juju/charms/trusty/kubernetes/files/kubelet.upstart.tmpl
+++ b/cluster/juju/charms/trusty/kubernetes/files/kubelet.upstart.tmpl
@@ -9,6 +9,7 @@ kill timeout 60 # wait 60s between SIGTERM and SIGKILL.
 
 exec /usr/local/bin/kubelet \
      --address=%(kubelet_bind_addr)s \
+     --allow-privileged=true \
      --api-servers=%(kubeapi_server)s \
      --hostname-override=%(kubelet_bind_addr)s \
      --cadvisor-port=4193 \