diff --git a/.lintignore b/.lintignore
index d43f6af0..f6b9efd0 100644
--- a/.lintignore
+++ b/.lintignore
@@ -16,7 +16,6 @@ prog/weave-kube/launch.sh
 prog/weaveexec/symlink
 test/*_test.sh
 test/600_proxy_docker_py.sh
-test/840_*
 test/assert.sh
 test/config.sh
 test/gce.sh
diff --git a/test/840_weave_kube_3_disabled.sh b/test/840_weave_kube_3_test.sh
similarity index 89%
rename from test/840_weave_kube_3_disabled.sh
rename to test/840_weave_kube_3_test.sh
index e375b1fe..179fe570 100755
--- a/test/840_weave_kube_3_disabled.sh
+++ b/test/840_weave_kube_3_test.sh
@@ -27,9 +27,13 @@ tear_down_kubeadm
 docker_on $HOST1 run --rm --privileged --net=host --entrypoint=/usr/sbin/ipset weaveworks/weave-npc create test_840_ipset bitmap:ip range 192.168.1.0/24 || true
 docker_on $HOST1 run --rm --privileged --net=host --entrypoint=/usr/sbin/ipset weaveworks/weave-npc add test_840_ipset 192.168.1.11
 
+# kubeadm init upgrades to latest Kubernetes version by default, therefore we try to lock the version using the below option:
+k8s_version="$(run_on $HOST1 "kubelet --version" | grep -oP "(?<=Kubernetes )v[\d\.\-beta]+")"
+k8s_version_option="$([[ "$k8s_version" > "v1.6" ]] && echo "kubernetes-version" || echo "use-kubernetes-version")"
+
 for host in $HOSTS; do
     if [ $host = $HOST1 ] ; then
-	run_on $host "sudo systemctl start kubelet && sudo kubeadm init --token=$TOKEN"
+	run_on $host "sudo systemctl start kubelet && sudo kubeadm init --$k8s_version_option=$k8s_version --token=$TOKEN"
     else
 	run_on $host "sudo systemctl start kubelet && sudo kubeadm join --token=$TOKEN $HOST1IP"
     fi
diff --git a/tools b/tools
index faaaa6f2..cf87ca33 160000
--- a/tools
+++ b/tools
@@ -1 +1 @@
-Subproject commit faaaa6f2cc92ff348b4a6102ae7378629a18d577
+Subproject commit cf87ca33a1775de36bf793615513c85e07907466