diff --git a/tasks/main.yml b/tasks/main.yml
index 2e175c6..376b7c3 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -70,18 +70,18 @@
     - inventory_hostname == active_server or inventory_hostname == groups[rke2_servers_group_name].0
     - do_etcd_restore is defined or do_etcd_restore_from_s3 is defined
 
-- name: Download kubeconfig to ansible localhost
-  ansible.builtin.include_tasks: download_kubeconfig.yaml
-  when:
-    - rke2_download_kubeconf | bool
-    - inventory_hostname == groups[rke2_servers_group_name].0
-
 - name: Prepare and join remaining nodes of the cluster
   ansible.builtin.include_tasks: remaining_nodes.yml
   when:
     - active_server is defined
     - groups[rke2_cluster_group_name] | length | int >= 2
 
+- name: Download kubeconfig to ansible localhost
+  ansible.builtin.include_tasks: download_kubeconfig.yaml
+  when:
+    - rke2_download_kubeconf | bool
+    - inventory_hostname == groups[rke2_servers_group_name].0
+
 - name: Rolling cordon and drain restart when version changes - servers
   ansible.builtin.include_tasks: rolling_restart.yml
   with_items: "{{ groups[rke2_servers_group_name] }}"