diff --git a/pkg/tasks/tasks.go b/pkg/tasks/tasks.go
index b39e1b7aa..3ff7a5b4d 100644
--- a/pkg/tasks/tasks.go
+++ b/pkg/tasks/tasks.go
@@ -259,6 +259,12 @@ func WithResources(t Tasks) Tasks {
 				Description: "ensure credential",
 				Predicate:   func(s *state.State) bool { return s.Cluster.CloudProvider.SecretProviderClassName == "" },
 			},
+			{
+				Fn:          ensureCABundleConfigMap,
+				Operation:   "ensuring caBundle configMap",
+				Description: "ensure caBundle configMap",
+				Predicate:   func(s *state.State) bool { return s.Cluster.CABundle != "" },
+			},
 			{
 				Fn:          addons.Ensure,
 				Operation:   "applying addons",
@@ -274,12 +280,6 @@ func WithResources(t Tasks) Tasks {
 				Fn:        localhelm.Deploy,
 				Operation: "releasing core helm charts",
 			},
-			{
-				Fn:          ensureCABundleConfigMap,
-				Operation:   "ensuring caBundle configMap",
-				Description: "ensure caBundle configMap",
-				Predicate:   func(s *state.State) bool { return s.Cluster.CABundle != "" },
-			},
 			{
 				Fn:          externalccm.Ensure,
 				Operation:   "ensuring external CCM",