diff --git a/cluster.yml b/cluster.yml
index 1b93addf48d30f99b9f4f2f3a7333be8eea5eea6..d9b96964176fde042fe29fe5ecdb2926c3568b2f 100644
--- a/cluster.yml
+++ b/cluster.yml
@@ -4,9 +4,12 @@
   roles:
     - { role: download, tags: download }
 
-- hosts: k8s-cluster
+- hosts: etcd
   roles:
     - { role: etcd, tags: etcd }
+
+- hosts: k8s-cluster
+  roles:
     - { role: docker, tags: docker }
     - { role: dnsmasq, tags: dnsmasq }
     - { role: network_plugin, tags: ['calico', 'flannel', 'network'] }
diff --git a/roles/etcd/tasks/install.yml b/roles/etcd/tasks/install.yml
index f02dc93db3e8c0ec5cd602f3f7d459c559a1d258..ac3522f4d7bbd12ab1d12728d56bd90722613fc2 100644
--- a/roles/etcd/tasks/install.yml
+++ b/roles/etcd/tasks/install.yml
@@ -7,7 +7,7 @@
      src={{ local_release_dir }}/etcd/bin/{{ item }}
      dest={{ bin_dir }}
      owner=etcd
-     mode=u+x
+     mode=0755
   with_items:
     - etcdctl
     - etcd
diff --git a/roles/kubernetes/master/tasks/main.yml b/roles/kubernetes/master/tasks/main.yml
index d0aa318770594bf5fad58f1233fe1fdceadda078..987c41c6e599fe14f65fa6945692b9e6f44e056f 100644
--- a/roles/kubernetes/master/tasks/main.yml
+++ b/roles/kubernetes/master/tasks/main.yml
@@ -9,7 +9,7 @@
      src={{ local_release_dir }}/kubernetes/bin/kubectl
      dest={{ bin_dir }}
      owner=kube
-     mode=u+x
+     mode=0755
 
 - name: populate users for basic auth in API
   lineinfile:
diff --git a/roles/kubernetes/node/tasks/install.yml b/roles/kubernetes/node/tasks/install.yml
index e1f45460ab630fd36c4a5baab166863acb43a361..6c0a75470e9369df0611110784981ae5183e8b47 100644
--- a/roles/kubernetes/node/tasks/install.yml
+++ b/roles/kubernetes/node/tasks/install.yml
@@ -8,6 +8,6 @@
      src={{ local_release_dir }}/kubernetes/bin/kubelet
      dest={{ bin_dir }}
      owner=kube
-     mode=u+x
+     mode=0755
   notify:
     - restart kubelet
diff --git a/roles/network_plugin/tasks/calico.yml b/roles/network_plugin/tasks/calico.yml
index eba8967d1a60dba5e9e7e6ac9de1a9dabf8d3d15..4a935c5afe60d49a23e3066685a4d9ec02c85d5e 100644
--- a/roles/network_plugin/tasks/calico.yml
+++ b/roles/network_plugin/tasks/calico.yml
@@ -3,7 +3,7 @@
   copy:
      src={{ local_release_dir }}/calico/bin/calicoctl
      dest={{ bin_dir }}
-     mode=u+x
+     mode=0755
   notify: restart calico-node
 
 - name: Calico | Create calicoctl symlink (needed by kubelet)