also use kube_api_pwd for root account

This makes it a bit more secure. Also the password can now be changed with a (inventory) variable (no need to edit all.yml).