diff --git a/roles/rke2/tasks/kubeconfig.yml b/roles/rke2/tasks/kubeconfig.yml
index d5db29fd5843cdd3f44b88a4bbdd371fbfaf7ab2..82ca2e85c1fdfd4912ec8d622055d6605935c638 100644
--- a/roles/rke2/tasks/kubeconfig.yml
+++ b/roles/rke2/tasks/kubeconfig.yml
@@ -19,19 +19,20 @@
     dest: kubeconfig.yaml
     flat: yes
 
-- name: fetch kubeconfig from master and copy it 
-  ansible.builtin.fetch:
-    src: /etc/rancher/rke2/rke2.yaml
-    dest: kubeconfigext.yaml
-    flat: yes
-
 - name: replace endpoint in kubeconfig
   delegate_to: localhost
   become: false
   ansible.builtin.replace:
     path: kubeconfig.yaml
     regexp: '^(\s+server: ).*'
-    replace: '\1https://{{ ansible_host }}:6443'
+    replace: '\1https://{{ lb_ip_mgmt }}:6443'
+    
+- name: fetch kubeconfig from master and copy it 
+  ansible.builtin.fetch:
+    src: /etc/rancher/rke2/rke2.yaml
+    dest: kubeconfigext.yaml
+    flat: yes
+
 
 - name: replace endpoint in external kubeconfig
   delegate_to: localhost