diff --git a/roles/rke2/tasks/config_ccm.yml b/roles/rke2/tasks/config_ccm.yml
index e1ffde9564fab8395b3429ed76e4fd0b69fc9579..988160ef97cdd47a1a7718f24c35671d3c5e1690 100644
--- a/roles/rke2/tasks/config_ccm.yml
+++ b/roles/rke2/tasks/config_ccm.yml
@@ -15,9 +15,8 @@
     dest: /tmp/cloud.conf
 
 - name: create secrets for CCM
-  ansible.builtin.shell:
-    executable: /var/lib/rancher/rke2/bin/kubectl
-    cmd: create secret generic cloud-config --namespace kube-system --from-file=cloud.conf=/tmp/cloud.conf
+  ansible.builtin.command:
+    cmd: /var/lib/rancher/rke2/bin/kubectl create secret generic cloud-config --namespace kube-system --from-file=cloud.conf=/tmp/cloud.conf
   environment:
     KUBECONFIG: /etc/rancher/rke2/rke2.yaml