diff --git a/ansible/vars/metacluster.yml b/ansible/vars/metacluster.yml
index 01693dd..a503c1d 100644
--- a/ansible/vars/metacluster.yml
+++ b/ansible/vars/metacluster.yml
@@ -23,6 +23,13 @@ platform:
             ingressRoute:
               dashboard:
                 enabled: false
+            initContainers:
+              - name: volume-permissions
+                image: busybox:1
+                command: ["sh", "-c", "touch /data/acme.json && chmod -Rv 600 /data/* && chown 65532:65532 /data/acme.json"]
+                volumeMounts:
+                  - name: data
+                    mountPath: /data
             persistence:
               enabled: true
             ports:
@@ -209,6 +216,8 @@ dependencies:
     - kubernetes.core
 
   container_images:
+    # This should match the image tag referenced at `platform.packaged_components[.name==traefik].config`
+    - busybox:1
     - ghcr.io/kube-vip/kube-vip:v0.5.8
     # The following list is generated by running the following commands:
     #   $ clusterctl init -i vsphere:<version> [...]