diff --git a/kubeblocks.yml b/kubeblocks.yml
index e22f774..97d5471 100755
--- a/kubeblocks.yml
+++ b/kubeblocks.yml
@@ -2,8 +2,8 @@
 ---
 # ~/.kube/config should be valid
 - name: Manage KubeBlocks
-  hosts: localhost
-  become: false
+  hosts: controller
+  become: true
   vars:
     # Semaphore does not pass $HOME so K8S_AUTH_KUBECONFIG needs to be set.
     k8s_auth_kubeconfig: /home/semaphore/.kube/config