diff --git a/ansible/roles/kubernetes_control_plane/tasks/cilium.yaml b/ansible/roles/kubernetes_control_plane/tasks/cilium.yaml
new file mode 100644
index 0000000..63a9c83
--- /dev/null
+++ b/ansible/roles/kubernetes_control_plane/tasks/cilium.yaml
@@ -0,0 +1,12 @@
+- name: Ensure Cilium repository exists
+  kubernetes.core.helm_repository:
+    name: cilium
+    url: https://helm.cilium.io/
+
+- name: Ensure Cilium is installed
+  kubernetes.core.helm:
+    release_name: cilium
+    release_namespace: kube-system
+    chart_ref: cilium/cilium
+    chart_version: 1.19.5
+  run_once: true
diff --git a/ansible/roles/kubernetes_control_plane/tasks/helm.yaml b/ansible/roles/kubernetes_control_plane/tasks/helm.yaml
new file mode 100644
index 0000000..aedfbeb
--- /dev/null
+++ b/ansible/roles/kubernetes_control_plane/tasks/helm.yaml
@@ -0,0 +1,15 @@
+- name: Add Helm APT repository
+  ansible.builtin.deb822_repository:
+    name: helm
+    types: deb
+    uris: https://packages.buildkite.com/helm-linux/helm-debian/any/
+    suites: any
+    components: main
+    signed_by: https://packages.buildkite.com/helm-linux/helm-debian/gpgkey
+    state: present
+
+- name: Install Helm
+  ansible.builtin.apt:
+    name: helm
+    state: present
+    update_cache: true
diff --git a/ansible/roles/kubernetes_control_plane/tasks/main.yaml b/ansible/roles/kubernetes_control_plane/tasks/main.yaml
index d0fed78..df82f64 100644
--- a/ansible/roles/kubernetes_control_plane/tasks/main.yaml
+++ b/ansible/roles/kubernetes_control_plane/tasks/main.yaml
@@ -55,8 +55,8 @@
       - kubectl
     state: present
 
-# - name: Install Pod Network (Calico)
-#   ansible.builtin.shell: kubectl apply -f https://raw.githubusercontent.com/projectcalico/calico/v3.32.0/manifests/calico.yaml > pod_network_setup.txt
-#   args:
-#     chdir: $HOME
-#     creates: pod_network_setup.txt
+- name: Install Helm
+  ansible.builtin.import_tasks: helm.yaml
+
+- name: Install Cilium CNI
+  ansible.builtin.import_tasks: cilium.yaml