diff --git a/roles/k8s-worker/tasks/main.yml b/roles/k8s-worker/tasks/main.yml
index f589499..034d9e4 100644
--- a/roles/k8s-worker/tasks/main.yml
+++ b/roles/k8s-worker/tasks/main.yml
@@ -1,3 +1,6 @@
+- name: flush handlers
+  meta: flush_handlers
+
 - name: stat /var/lib/kubelet/config.yaml
   stat:
     path: /var/lib/kubelet/config.yaml
@@ -31,6 +34,7 @@
       bootstrap_token_secret: >-
         {{ lookup("password", "/dev/null length=16 chars=ascii_lowercase,digits") }}
       cacheable: false
+    no_log: true
     tags:
     - bootstrap-token
 
@@ -57,6 +61,7 @@
           usage-bootstrap-authentication: 'true'
           usage-bootstrap-signing: 'true'
           auth-extra-groups: 'system:bootstrappers:kubeadm:default-node-token'
+    no_log: true
     tags:
     - bootstrap-token