diff --git a/tasks/install_server.yml b/tasks/install_server.yml
index 9047a18..ff7d23a 100644
--- a/tasks/install_server.yml
+++ b/tasks/install_server.yml
@@ -113,6 +113,16 @@
 #    - groups['KubernetesMasters'] | length > 1
   changed_when: False
 
+- name: Secure etcd directory
+  file:
+    path: "/var/lib/etcd"
+    state: directory
+    owner: root
+    group: root
+    mode: 0700
+  when:
+    - kubernetes_master|bool
+
 - name: Deploy initial kubeadm config
   template:
     src: kubeadm-config.yaml.j2