diff --git a/cluster/saltbase/salt/kube-apiserver/init.sls b/cluster/saltbase/salt/kube-apiserver/init.sls
index ba21f2482d5..55f19b2fee8 100644
--- a/cluster/saltbase/salt/kube-apiserver/init.sls
+++ b/cluster/saltbase/salt/kube-apiserver/init.sls
@@ -47,7 +47,11 @@
     - user: kube-apiserver
     - group: kube-apiserver
     - mode: 400
-
+    - watch:
+      - user: kube-apiserver
+      - group: kube-apiserver
+    - watch_in:
+      - service: kube-apiserver
 {% endif %}
 {% endif %}