Optionally refresh kubeadm token every time (#5043)

Change-Id: I278cb14aa93abf20160cc001f69e2f472504e6d8

roles/kubernetes/master/defaults/main/main.yml

@@ -41,6 +41,9 @@ kube_scheduler_bind_address: 0.0.0.0
 # discovery_timeout modifies the discovery timeout
 discovery_timeout: 5m0s
 
+# Instruct first master to refresh kubeadm token
+kubeadm_refresh_token: true
+
 # audit support
 kubernetes_audit: false
 # path to audit log file

roles/kubernetes/master/tasks/kubeadm-setup.yml

@@ -146,6 +146,7 @@
   when:
     - inventory_hostname == groups['kube-master']|first
     - kubeadm_token is defined
+    - kubeadm_refresh_token
   tags:
     - kubeadm_token