diff --git a/bootstrap/init.sh b/bootstrap/init.sh
index e70d189..1110230 100755
--- a/bootstrap/init.sh
+++ b/bootstrap/init.sh
@@ -6,7 +6,7 @@
 echo "######################################################################################"
 echo "##  Reinit repository"
 rm -rf kubespray
-VERSION=${1:-release-2.14}
+VERSION=${1:-release-2.15}
 git clone --branch $VERSION https://github.com/kubernetes-sigs/kubespray.git
 
 echo "######################################################################################"
diff --git a/bootstrap/inventory/prod/group_vars/k8s-cluster/k8s-cluster.yml b/bootstrap/inventory/prod/group_vars/k8s-cluster/k8s-cluster.yml
index cfb449d..4960573 100644
--- a/bootstrap/inventory/prod/group_vars/k8s-cluster/k8s-cluster.yml
+++ b/bootstrap/inventory/prod/group_vars/k8s-cluster/k8s-cluster.yml
@@ -1,4 +1,11 @@
 ---
+## custom by moritz
+
+kube_kubeadm_apiserver_extra_args:
+  service-account-issuer: kubernetes.default.svc
+  service-account-signing-key-file: /etc/kubernetes/ssl/sa.key
+  api-audiences: kubernetes.default.svc
+
 # Kubernetes configuration dirs and system namespace.
 # Those are where all the additional config stuff goes
 # the kubernetes normally puts in /srv/kubernetes.