diff --git a/ansible/roles/ironic/defaults/main.yml b/ansible/roles/ironic/defaults/main.yml
index 1181cf4297..82823b8b86 100644
--- a/ansible/roles/ironic/defaults/main.yml
+++ b/ansible/roles/ironic/defaults/main.yml
@@ -82,6 +82,7 @@ ironic_services:
     enabled: true
     cap_add:
       - NET_ADMIN
+      - NET_RAW
     image: "{{ ironic_dnsmasq_image_full }}"
     volumes: "{{ ironic_dnsmasq_default_volumes + ironic_dnsmasq_extra_volumes }}"
     dimensions: "{{ ironic_dnsmasq_dimensions }}"
diff --git a/releasenotes/notes/adds-net-raw-capability-to-ironic-dnsmasq-40f5894c5180b12d.yaml b/releasenotes/notes/adds-net-raw-capability-to-ironic-dnsmasq-40f5894c5180b12d.yaml
new file mode 100644
index 0000000000..bd9022b7f0
--- /dev/null
+++ b/releasenotes/notes/adds-net-raw-capability-to-ironic-dnsmasq-40f5894c5180b12d.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    Fixes an issue with ironic dnsmasq failing to start in deployments
+    using podman because it requires the NET_RAW capability. See `LP#2055282
+    <https://bugs.launchpad.net/kolla-ansible/+bug/2055282>`__.