diff --git a/cluster/plan.go b/cluster/plan.go
index 0c7ea5e4..1ecdab06 100644
--- a/cluster/plan.go
+++ b/cluster/plan.go
@@ -193,6 +193,7 @@ func (c *Cluster) BuildKubeletProcess(host *hosts.Host) v3.Process {
 		"/etc/kubernetes:/etc/kubernetes:z",
 		"/etc/cni:/etc/cni:ro,z",
 		"/opt/cni:/opt/cni:ro,z",
+		"/var/lib/cni:/var/lib/cni:z",
 		"/etc/resolv.conf:/etc/resolv.conf",
 		"/sys:/sys",
 		"/var/lib/docker:/var/lib/docker:rw,z",
diff --git a/hosts/hosts.go b/hosts/hosts.go
index 1766de38..6d453931 100644
--- a/hosts/hosts.go
+++ b/hosts/hosts.go
@@ -36,6 +36,7 @@ const (
 	ToCleanSSLDir        = "/etc/kubernetes/ssl"
 	ToCleanCNIConf       = "/etc/cni"
 	ToCleanCNIBin        = "/opt/cni"
+	ToCleanCNILib        = "/var/lib/cni"
 	ToCleanCalicoRun     = "/var/run/calico"
 	ToCleanTempCertPath  = "/etc/kubernetes/.tmp/"
 	CleanerContainerName = "kube-cleaner"
@@ -50,6 +51,7 @@ func (h *Host) CleanUpAll(ctx context.Context, cleanerImage string, prsMap map[s
 		ToCleanCNIBin,
 		ToCleanCalicoRun,
 		ToCleanTempCertPath,
+		ToCleanCNILib,
 	}
 	return h.CleanUp(ctx, toCleanPaths, cleanerImage, prsMap)
 }
@@ -64,6 +66,7 @@ func (h *Host) CleanUpWorkerHost(ctx context.Context, cleanerImage string, prsMa
 		ToCleanCNIConf,
 		ToCleanCNIBin,
 		ToCleanCalicoRun,
+		ToCleanCNILib,
 	}
 	return h.CleanUp(ctx, toCleanPaths, cleanerImage, prsMap)
 }
@@ -78,6 +81,7 @@ func (h *Host) CleanUpControlHost(ctx context.Context, cleanerImage string, prsM
 		ToCleanCNIConf,
 		ToCleanCNIBin,
 		ToCleanCalicoRun,
+		ToCleanCNILib,
 	}
 	return h.CleanUp(ctx, toCleanPaths, cleanerImage, prsMap)
 }