diff --git a/metropolis/proto/api/management.proto b/metropolis/proto/api/management.proto
index 396df83..0df1d69 100644
--- a/metropolis/proto/api/management.proto
+++ b/metropolis/proto/api/management.proto
@@ -168,9 +168,11 @@
     string id = 4;
   }
 
-  // kubernetesWorker adjusts the appropriate role when set. Nodes performing
-  // this role must also be consensus members. 
+  // kubernetesController adjusts the appropriate role when set.
   optional bool kubernetesWorker = 2;
+  // kubernetesController adjusts the appropriate role when set. Nodes performing
+  // this role must also be consensus members.
+  optional bool kubernetesController = 5;
   optional bool consensusMember = 3;
 }
 
diff --git a/metropolis/proto/common/common.proto b/metropolis/proto/common/common.proto
index ca4bfea..1c01834 100644
--- a/metropolis/proto/common/common.proto
+++ b/metropolis/proto/common/common.proto
@@ -28,6 +28,8 @@
 // can be used to carry required data to start up services for a given role,
 // this must not be confidential/private data.
 message NodeRoles {
+    message KubernetesController {
+    }
     message KubernetesWorker {
     }
     message ConsensusMember {
@@ -56,6 +58,7 @@
     }
     KubernetesWorker kubernetes_worker = 1;
     ConsensusMember consensus_member = 2;
+    KubernetesController kubernetes_controller = 3;
 }
 
 // NodeState is the state of a Metropolis node from the point of view of the