diff --git a/apps/metallb/templates/bgppeer.yaml b/apps/metallb/templates/bgppeer.yaml
index 4a925ab..83adbe3 100644
--- a/apps/metallb/templates/bgppeer.yaml
+++ b/apps/metallb/templates/bgppeer.yaml
@@ -22,6 +22,10 @@ spec:
   myASN: 64520
   peerASN: 64512
   peerAddress: 10.10.10.1
+  # Kubernetes' own convention for node-role.kubernetes.io/* labels is an
+  # empty string value (kubectl's ROLES column reads the key, not the value).
+  # Match that convention exactly, or this selector matches zero nodes and
+  # MetalLB silently generates BGP configuration for nobody.
   nodeSelectors:
     - matchLabels:
-        node-role.kubernetes.io/worker: worker
+        node-role.kubernetes.io/worker: ""