diff --git a/roles/rke2/tasks/fix_selinux.yml b/roles/rke2/tasks/fix_selinux.yml
index 06824ae444ec6a2daa38cab322fadfce4f7bc26c..696f97b5daefca6d630a8a0ebf7e4f3e74b369f3 100644
--- a/roles/rke2/tasks/fix_selinux.yml
+++ b/roles/rke2/tasks/fix_selinux.yml
@@ -18,6 +18,7 @@
   until: item in control_plane_pods_created.stdout
   retries: 10
   delay: 30
+  when: ('master' in group_names )
   ignore_errors: True
   with_items:
     - etcd
@@ -28,6 +29,7 @@
 - name: Wait for openstack-cloud-controller deamon set to be ready
   shell: "/var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml wait --namespace=kube-system --for=condition=Ready pods --selector app=openstack-cloud-controller-manager --timeout=360s"
   register: openstack_ccm_ready
+  when: ('master' in group_names)
   ignore_errors: True