From f0dd31c5523c5f372d315953b8ed54050eba8663 Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Sun, 1 Mar 2026 03:02:37 +0000
Subject: [PATCH] fix: only manage kubeconfig on primary control plane

---
 ansible/roles/k3s-server/tasks/main.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/k3s-server/tasks/main.yml b/ansible/roles/k3s-server/tasks/main.yml
index 75cff87..eb07174 100644
--- a/ansible/roles/k3s-server/tasks/main.yml
+++ b/ansible/roles/k3s-server/tasks/main.yml
@@ -140,16 +140,26 @@
       {{ k3s_journal.stdout | default('n/a') }}
   when: k3s_ready is failed
 
+- name: Copy kubeconfig to default location for root
+  file:
+    path: /root/.kube
+    state: directory
+    mode: "0700"
+  when: k3s_primary | default(false)
+
 - name: Copy kubeconfig to default location for root
   file:
     src: /etc/rancher/k3s/k3s.yaml
     dest: /root/.kube/config
     state: link
     force: true
+  when: k3s_primary | default(false)
 
 - name: Ensure .kube directory exists for ansible user
   file:
     path: "/home/{{ ansible_user }}/.kube"
     state: directory
     mode: "0755"
-  when: ansible_user != 'root'
+  when:
+    - ansible_user != 'root'
+    - k3s_primary | default(false)