Fix: kube-apiserver tag will overwrite secrets-at-rest token if used independently (#10460)

Signed-off-by: Jason Witkowski <jwitko1@gmail.com>

roles/kubernetes/control-plane/tasks/encrypt-at-rest.yml

@@ -38,5 +38,3 @@
     owner: root
     group: "{{ kube_cert_group }}"
     mode: 0640
-  tags:
-    - kube-apiserver

roles/kubernetes/control-plane/tasks/main.yml

@@ -28,6 +28,8 @@
   import_tasks: encrypt-at-rest.yml
   when:
     - kube_encrypt_secret_data
+  tags:
+    - kube-apiserver
 
 - name: Install | Copy kubectl binary from download dir
   copy: