---
# Install Cilium as the CNI (ADR-0002). The cluster is NotReady until this runs.
# Executed from the controller against a fetched kubeconfig (role handles delegation).
#
# TARGET (R-ENV-02): `k3s_hosts` defaults to dev's `k3s_servers`; prod is
#   ansible-playbook playbooks/cilium.yml -e k3s_hosts=k3s_prod
# The role's "fetch the kubeconfig from the primary" delegation follows the
# k3s_primary_group group_var, so it picks the prod primary automatically.
- name: Install Cilium CNI
  hosts: "{{ k3s_hosts | default('k3s_servers') }}"
  become: true
  gather_facts: false
  roles:
    - role: cilium