diff --git a/roles/kubernetes/preinstall/defaults/main.yml b/roles/kubernetes/preinstall/defaults/main.yml
index 965dcbda0..e21587517 100644
--- a/roles/kubernetes/preinstall/defaults/main.yml
+++ b/roles/kubernetes/preinstall/defaults/main.yml
@@ -14,7 +14,6 @@ common_required_pkgs:
   - bash-completion
   - socat
   - unzip
-  - nss
 
 # Set to true if your network does not support IPv6
 # This maybe necessary for pulling Docker images from
diff --git a/roles/kubernetes/preinstall/vars/centos.yml b/roles/kubernetes/preinstall/vars/centos.yml
index bacfb96b5..67fbfe085 100644
--- a/roles/kubernetes/preinstall/vars/centos.yml
+++ b/roles/kubernetes/preinstall/vars/centos.yml
@@ -3,3 +3,4 @@ required_pkgs:
   - libselinux-python
   - device-mapper-libs
   - ebtables
+  - nss
diff --git a/roles/kubernetes/preinstall/vars/redhat.yml b/roles/kubernetes/preinstall/vars/redhat.yml
index bacfb96b5..67fbfe085 100644
--- a/roles/kubernetes/preinstall/vars/redhat.yml
+++ b/roles/kubernetes/preinstall/vars/redhat.yml
@@ -3,3 +3,4 @@ required_pkgs:
   - libselinux-python
   - device-mapper-libs
   - ebtables
+  - nss