we must not replace the endpoint anymore, since we dont have the external lb

roles/rke2/tasks/kubeconfig.yml

@@ -19,10 +19,16 @@
     dest: kubeconfig.yaml
     flat: yes
 
+- name: fetch kubeconfig from master
+  ansible.builtin.fetch:
+    src: /etc/rancher/rke2/rke2.yaml
+    dest: kubeconfigext.yaml
+    flat: yes
+
 - name: replace endpoint in kubeconfig
   delegate_to: localhost
   become: false
   ansible.builtin.replace:
-    path: kubeconfig.yaml
+    path: kubeconfigext.yaml
     regexp: '^(\s+server: ).*'
     replace: '\1https://rancher.{{ domain }}:6443'