diff --git a/builtin/roles/addons/cni/defaults/main.yaml b/builtin/roles/addons/cni/defaults/main.yaml
index 722bc156..332f78ba 100644
--- a/builtin/roles/addons/cni/defaults/main.yaml
+++ b/builtin/roles/addons/cni/defaults/main.yaml
@@ -99,6 +99,8 @@ cni:
       {{- else }}
       {{ .groups.kube_control_plane | default list | first }}
       {{- end }}
+    operator_replicas: |
+      1
     k8s_port: |
       {{ .kubernetes.apiserver.port | default 6443 }}
   kubeovn:
diff --git a/builtin/roles/addons/cni/tasks/cilium.yaml b/builtin/roles/addons/cni/tasks/cilium.yaml
index c1235d2b..8f441d20 100644
--- a/builtin/roles/addons/cni/tasks/cilium.yaml
+++ b/builtin/roles/addons/cni/tasks/cilium.yaml
@@ -31,5 +31,7 @@
       --set ipv6NativeRoutingCIDR: {{ .cni.kube_pods_v6_cidr }} \
     {{- end }}
     {{- if .cni.kube_proxy }}
-      --set kubeProxyReplacement=strict --set k8sServiceHost={{ .cni.cilium.k8s_endpoint }} --set k8sServicePort={{ .cni.cilium.k8s_port }}
+      --set kubeProxyReplacement=strict \
+      --set k8sServiceHost={{ .cni.cilium.k8s_endpoint }} \
+      --set k8sServicePort={{ .cni.cilium.k8s_port }}
     {{- end }}