we dont need to fix selinux when we are upgrading a running cluster

roles/rke2/tasks/main.yml

@@ -21,10 +21,10 @@
 
 - name: Flush handlers
   meta: flush_handlers
-  
+
 #This task runs only after the full installer went through and had a bit of time to boot, then starts to enforce SELinux
 - include_tasks: fix_selinux.yml
-  when: state != 'absent' and 'control-plane' in group_names
+  when: state != 'absent' and 'control-plane' in group_names and not upgrade
 
 - name: uninstall rke2
   command: rke2-uninstall.sh