diff --git a/roles/kargo-defaults/defaults/main.yaml b/roles/kargo-defaults/defaults/main.yaml
index 91602fdaa..2dfb2cd70 100644
--- a/roles/kargo-defaults/defaults/main.yaml
+++ b/roles/kargo-defaults/defaults/main.yaml
@@ -121,6 +121,9 @@ enable_network_policy: false
 authorization_mode: ['AlwaysAllow']
 rbac_enabled: "{{ 'RBAC' in authorization_mode }}"
 
+## Set this flag to re-create kubernetes node and master certificates !!WARNING!!: Will overwrite existing certs.
+rotate_kubernetes_certs: false
+
 ssl_ca_dirs: "[
       {% if ansible_os_family in ['CoreOS', 'Container Linux by CoreOS'] -%}
       '/usr/share/ca-certificates',