diff --git a/roles/rke2/tasks/kubeconfig.yml b/roles/rke2/tasks/kubeconfig.yml
index bc77402c2e0d45a49843d184aebe97a882f964d8..ee5f324f64b526a53de13312663d522844d1b66b 100644
--- a/roles/rke2/tasks/kubeconfig.yml
+++ b/roles/rke2/tasks/kubeconfig.yml
@@ -26,6 +26,14 @@
     flat: yes
 
 - name: replace endpoint in kubeconfig
+  delegate_to: localhost
+  become: false
+  ansible.builtin.replace:
+    path: kubeconfig.yaml
+    regexp: '^(\s+server: ).*'
+    replace: '\1https://{{ ansible_host }}:6443'
+
+- name: replace endpoint in external kubeconfig
   delegate_to: localhost
   become: false
   ansible.builtin.replace: