diff --git a/cluster/saltbase/salt/generate-cert/init.sls b/cluster/saltbase/salt/generate-cert/init.sls
index 2caa793bd38..5d66fa29d2f 100644
--- a/cluster/saltbase/salt/generate-cert/init.sls
+++ b/cluster/saltbase/salt/generate-cert/init.sls
@@ -21,6 +21,9 @@
   {% set certgen="make-ca-cert.sh" %}
 {% endif %}
 
+openssl:
+  pkg.installed: []
+
 kube-cert:
   group.present:
     - system: True
@@ -38,3 +41,5 @@ kubernetes-cert:
     - user: root
     - group: root
     - shell: /bin/bash
+    - require:
+      - pkg: openssl