why doesnt it do the replacement??

roles/rke2/tasks/kubeconfig.yml

@@ -19,19 +19,20 @@
     dest: kubeconfig.yaml
     flat: yes
 
-- name: fetch kubeconfig from master and copy it 
-  ansible.builtin.fetch:
-    src: /etc/rancher/rke2/rke2.yaml
-    dest: kubeconfigext.yaml
-    flat: yes
-
 - name: replace endpoint in kubeconfig
   delegate_to: localhost
   become: false
   ansible.builtin.replace:
     path: kubeconfig.yaml
     regexp: '^(\s+server: ).*'
-    replace: '\1https://{{ ansible_host }}:6443'
+    replace: '\1https://{{ lb_ip_mgmt }}:6443'
+    
+- name: fetch kubeconfig from master and copy it 
+  ansible.builtin.fetch:
+    src: /etc/rancher/rke2/rke2.yaml
+    dest: kubeconfigext.yaml
+    flat: yes
+
 
 - name: replace endpoint in external kubeconfig
   delegate_to: localhost