diff --git a/ansible/group_vars/all/oas.yml b/ansible/group_vars/all/oas.yml
index 2fb7f2804de625369ab56b3ae6e12dbb4d9d8b41..89c3e23952b73851f05283be5c575e2a1292ec2d 100644
--- a/ansible/group_vars/all/oas.yml
+++ b/ansible/group_vars/all/oas.yml
@@ -25,5 +25,7 @@ krew:
   sha256: 'dc2f2e1ec8a0acb6f3e23580d4a8b38c44823e948c40342e13ff6e8e12edb15a'
 
 rke:
-  version: '0.2.3'
-  sha256: '84a9b5badfcdd14dde50fe003735b26761c53c317b9d90af9f4de9d351bad968'
+  version: '0.2.4'
+  # Also possible:
+  # checksum: 'sha256:https://github.com/rancher/rke/releases/download/v0.2.4/sha256sum.txt'
+  checksum: 'sha256:d6d78f324fa5d86b42307e81b76c82881a7bc18fa29362af7026d541b948d56d'
diff --git a/ansible/roles/rke_configuration/tasks/main.yml b/ansible/roles/rke_configuration/tasks/main.yml
index 070b40da362596b90e25e0c968bb30629b0ccefb..d74874004a99693f5b5d7612fe098ef6a9db3e51 100644
--- a/ansible/roles/rke_configuration/tasks/main.yml
+++ b/ansible/roles/rke_configuration/tasks/main.yml
@@ -4,7 +4,7 @@
 - name: Get current rke version
   tags:
     - rke
-  shell: rke --version | cut -d' ' -f 3 | sed 's/^.*v//'
+  shell: rke --version | cut -d' ' -f 3 | tr -d 'v'
   failed_when: false
   register: rke_version
   changed_when: false
@@ -21,10 +21,12 @@
     - rke
   get_url:
     url: https://github.com/rancher/rke/releases/download/v{{ rke.version }}/rke_linux-amd64
+    checksum: '{{ rke.checksum }}'
     dest: /usr/local/bin/rke
     force: yes
     mode: '0755'
   when: rke_version.stdout != rke.version
+  become: true
 
 
 - name: Create directory to contain rke configuration