diff --git a/roles/kubernetes/node/templates/kubelet.docker.service.j2 b/roles/kubernetes/node/templates/kubelet.docker.service.j2
index fdbdb89692c9de944a9cb51e33fd95f96473c334..bba1a5fc4b5824c042dabd32ec84ccab447423d5 100644
--- a/roles/kubernetes/node/templates/kubelet.docker.service.j2
+++ b/roles/kubernetes/node/templates/kubelet.docker.service.j2
@@ -5,6 +5,7 @@ After=docker.service
 Wants=docker.socket
 
 [Service]
+User=root
 EnvironmentFile={{kube_config_dir}}/kubelet.env
 ExecStart={{ bin_dir }}/kubelet \
 		$KUBE_LOGTOSTDERR \
diff --git a/roles/kubernetes/node/templates/kubelet.host.service.j2 b/roles/kubernetes/node/templates/kubelet.host.service.j2
index 78ba51f70f7db350f9162cc72a59fda8540415a3..c7dad4e290c99fa6fd55d301099168c3ce6a0329 100644
--- a/roles/kubernetes/node/templates/kubelet.host.service.j2
+++ b/roles/kubernetes/node/templates/kubelet.host.service.j2
@@ -5,6 +5,7 @@ After=docker.service
 Wants=docker.socket
 
 [Service]
+User=root
 EnvironmentFile=-{{kube_config_dir}}/kubelet.env
 {% if kubelet_flexvolumes_plugins_dir is defined %}
 ExecStartPre=-/bin/mkdir -p {{ kubelet_flexvolumes_plugins_dir }}
diff --git a/roles/kubernetes/node/templates/kubelet.rkt.service.j2 b/roles/kubernetes/node/templates/kubelet.rkt.service.j2
index 7e0c2f9423e1323bacb38e0c4f0d34da1320709d..4286d94708a246f5b917e0d425b6fb2083e060bc 100644
--- a/roles/kubernetes/node/templates/kubelet.rkt.service.j2
+++ b/roles/kubernetes/node/templates/kubelet.rkt.service.j2
@@ -4,6 +4,7 @@ Documentation=https://github.com/GoogleCloudPlatform/kubernetes
 Wants=network.target
 
 [Service]
+User=root
 Restart=on-failure
 RestartSec=10s
 TimeoutStartSec=0