diff --git a/infra/kube-vip/daemon-set.yaml b/infra/kube-vip/daemon-set.yaml
index b297806..2dbf386 100644
--- a/infra/kube-vip/daemon-set.yaml
+++ b/infra/kube-vip/daemon-set.yaml
@@ -3,7 +3,7 @@ kind: DaemonSet
 metadata:
   labels:
     app.kubernetes.io/name: kube-vip
-    app.kubernetes.io/version: v0.8.3
+    app.kubernetes.io/version: v0.9.0
   name: kube-vip
 spec:
   selector:
@@ -13,7 +13,7 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: kube-vip
-        app.kubernetes.io/version: v0.8.3
+        app.kubernetes.io/version: v0.9.0
     spec:
       affinity:
         nodeAffinity:
@@ -44,7 +44,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.annotations['feature.node.kubernetes.io/network-adapter']
-            - name: vip_cidr
+            - name: vip_subnet
               value: "32"
             - name: dns_mode
               value: first
@@ -74,7 +74,7 @@ spec:
               value: :2112
             - name: enableUPNP
               value: "true"
-          image: ghcr.io/kube-vip/kube-vip:v0.8.3
+          image: ghcr.io/kube-vip/kube-vip:v0.9.0
           imagePullPolicy: IfNotPresent
           name: kube-vip
           resources: {}
@@ -83,6 +83,8 @@ spec:
               add:
                 - NET_ADMIN
                 - NET_RAW
+              drop:
+                - ALL
       hostNetwork: true
       serviceAccountName: kube-vip
       tolerations: