diff --git a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-controllers.yml.j2 b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-controllers.yml.j2
index bd15082f0891f44dafec779a35fa5f3d8a582a68..f89e4d6acc91c59b65c290ab1538c9f158a1bada 100644
--- a/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-controllers.yml.j2
+++ b/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-controllers.yml.j2
@@ -21,6 +21,9 @@ spec:
     spec:
       nodeSelector:
         {{ calico_policy_controller_deployment_nodeselector }}
+{% if calico_datastore == "etcd" %}
+      hostNetwork: true
+{% endif %}
       serviceAccountName: calico-kube-controllers
       tolerations:
         - key: CriticalAddonsOnly