diff --git a/ansible/roles/kubernetes/tasks/common.yaml b/ansible/roles/kubernetes/tasks/common.yaml
index 63a3576..f3a77ce 100644
--- a/ansible/roles/kubernetes/tasks/common.yaml
+++ b/ansible/roles/kubernetes/tasks/common.yaml
@@ -5,6 +5,7 @@
       - jq # for decrypt_k8s_secret
       - helm
       - sops # Encrypt secrets
+      - cfssl # For generating certs for self-hosted cluster
     state: present
 
 # TODO: Make a FreeBSD package for kubeswitch or kubectx