Currently minuteman does load balancing by setting up a kernel in the host network namespace. This works fine for containers on virtual networks, where the default route is always set towards the host network namespace. However, for virtual networks where the default route is outside the host network namespace (say through OVS, or a linux bridge) the traffice from containers never hits the host network namespace effectively making minuteman disfunctional in such an environment.

To support such virtual networks (over CNI) we need minuteman to create IPVS in each container's network namespace so the loadbalancing can kick in the container's network namespace instead of the host network namespace.