only need run this once (#8833)

calicoctl ipam xx
calicoctl apply xx

roles/network_plugin/calico/tasks/install.yml

@@ -489,7 +489,7 @@
     - "{{ peers|selectattr('scope','undefined')|list|default([]) | union(peers|selectattr('scope','defined')|selectattr('scope','equalto', 'node')|list|default([])) }}"
   when:
     - peer_with_router|default(false)
-    - inventory_hostname in groups['k8s_cluster']
+    - inventory_hostname == groups['kube_control_plane'][0]
 
 - name: Calico | Configure ipam strictaffinity
   command:
@@ -500,4 +500,4 @@
   delay: "{{ retry_stagger | random + 3 }}"
   when:
     - calico_ipam_strictaffinity is defined
-    - inventory_hostname in groups['k8s_cluster']
+    - inventory_hostname == groups['kube_control_plane'][0]