---
- name: Download Cilium
  shell: |
    CILIUM_CLI_VERSION=$(curl -s https://raw.githubusercontent.com/cilium/cilium-cli/main/stable.txt)
    CLI_ARCH=amd64
    curl -L --fail --remote-name-all https://github.com/cilium/cilium-cli/releases/download/${CILIUM_CLI_VERSION}/cilium-linux-${CLI_ARCH}.tar.gz{,.sha256sum}
    sha256sum --check cilium-linux-${CLI_ARCH}.tar.gz.sha256sum
    tar xzvfC cilium-linux-${CLI_ARCH}.tar.gz /usr/local/bin
    rm cilium-linux-${CLI_ARCH}.tar.gz{,.sha256sum}
  args:
    executable: /bin/bash
    chdir: /tmp
  when: inventory_hostname in (groups['primary'] | default([]))

- name: Deploy Cilium
  become: false
  shell: |
    cilium install --version {{ cilium_version }}
  args:
    executable: /bin/bash
  when: inventory_hostname in (groups['primary'] | default([]))
...