diff --git a/kubernetes/master/controller.sls b/kubernetes/master/controller.sls
index 418b351..040d1e7 100644
--- a/kubernetes/master/controller.sls
+++ b/kubernetes/master/controller.sls
@@ -116,6 +116,19 @@
   - group: root
   - mode: 644
 
+{% for filename in ['kubernetes-server.crt', 'kubernetes-server.key', 'kubernetes-server.pem'] %}
+
+/etc/kubernetes/ssl/{{ filename }}:
+  file.managed:
+    - source: salt://_certs/kubernetes/{{ filename }}
+    - user: root
+    - group: haproxy
+    - mode: 640
+    - watch_in:
+      - service: master_services
+
+{% endfor %}
+
 master_services:
   service.running:
   - names: {{ master.services }}
diff --git a/kubernetes/master/init.sls b/kubernetes/master/init.sls
index cff687f..310746a 100644
--- a/kubernetes/master/init.sls
+++ b/kubernetes/master/init.sls
@@ -17,4 +17,4 @@
 - kubernetes.master.glusterfs
 {%- endif %}
 - kubernetes.master.controller
-- kubernetes.master.setup
\ No newline at end of file
+- kubernetes.master.setup