use a variable for api's 'root' password

inventory/group_vars/all.yml

@@ -17,13 +17,14 @@ kube_cert_group: kube-cert
 kube_log_level: 2
 
 # Users to create for basic auth in Kubernetes API via HTTP
+root_api_pwd: "changeme"
 kube_users:
-  kube:
-    pass: changeme
-    role: admin
-#   root:
-#     pass: changeme
-#     role: admin
+#  kube:
+#    pass: changeme
+#    role: admin
+   root:
+     pass: "{{root_api_pwd}}"
+     role: admin
 
 # Kubernetes cluster name, also will be used as DNS domain
 cluster_name: cluster.local