diff --git a/roles/etcd/tasks/check_certs.yml b/roles/etcd/tasks/check_certs.yml
index 593dbbe17f9f45c22c716cca7a9d8e9d81d50168..270c0abfc6827a162429020a14a0a645ef03b6e0 100644
--- a/roles/etcd/tasks/check_certs.yml
+++ b/roles/etcd/tasks/check_certs.yml
@@ -43,6 +43,7 @@
       {% for host in all_etcd_hosts %}
         {% if host == inventory_hostname %}
           {% if (not etcdcert.results[0].stat.exists|default(False)) or
+              (not etcdcert.results[1].stat.exists|default(False)) or
               (etcdcert.results[1].stat.checksum|default('') != etcdcert_master.results[loop.index].stat.checksum|default('')) -%}
             {%- set _ = certs.update({'sync': True}) -%}
           {% endif %}
diff --git a/roles/kubernetes/secrets/tasks/check-certs.yml b/roles/kubernetes/secrets/tasks/check-certs.yml
index aa3e4775416592d5717f7c5fd2c8af6c776e8805..0d5f238149ba795ce623328ba1fde29cd841f125 100644
--- a/roles/kubernetes/secrets/tasks/check-certs.yml
+++ b/roles/kubernetes/secrets/tasks/check-certs.yml
@@ -41,6 +41,7 @@
       {%- for host in groups['k8s-cluster'] %}
         {% if host == inventory_hostname %}
           {% if (not kubecert.results[0].stat.exists|default(False)) or
+              (not kubecert.results[1].stat.exists|default(False)) or
               (kubecert.results[1].stat.checksum|default('') != kubecert_master.results[loop.index].stat.checksum|default('')) -%}
             {%- set _ = certs.update({'sync': True}) -%}
           {% endif %}