diff --git a/roles/kube-master/templates/kube-apiserver-v1.8.service.j2 b/roles/kube-master/templates/kube-apiserver-v1.8.service.j2
index d4364e8..cf34650 100644
--- a/roles/kube-master/templates/kube-apiserver-v1.8.service.j2
+++ b/roles/kube-master/templates/kube-apiserver-v1.8.service.j2
@@ -35,7 +35,7 @@ ExecStart={{ bin_dir }}/kube-apiserver \
   --audit-log-path=/var/lib/audit.log \
   --event-ttl=1h \
   --requestheader-client-ca-file={{ ca_dir }}/ca.pem \
-  --requestheader-allowed-names='' \
+  --requestheader-allowed-names= \
   --requestheader-extra-headers-prefix=X-Remote-Extra- \
   --requestheader-group-headers=X-Remote-Group \
   --requestheader-username-headers=X-Remote-User \
diff --git a/roles/kube-master/templates/kube-apiserver.service.j2 b/roles/kube-master/templates/kube-apiserver.service.j2
index d0fd906..51d84a5 100644
--- a/roles/kube-master/templates/kube-apiserver.service.j2
+++ b/roles/kube-master/templates/kube-apiserver.service.j2
@@ -35,7 +35,7 @@ ExecStart={{ bin_dir }}/kube-apiserver \
   --audit-log-path=/var/lib/audit.log \
   --event-ttl=1h \
   --requestheader-client-ca-file={{ ca_dir }}/ca.pem \
-  --requestheader-allowed-names='' \
+  --requestheader-allowed-names= \
   --requestheader-extra-headers-prefix=X-Remote-Extra- \
   --requestheader-group-headers=X-Remote-Group \
   --requestheader-username-headers=X-Remote-User \