diff --git a/ansible/roles/kubernetes_cilium/tasks/main.yaml b/ansible/roles/kubernetes_cilium/tasks/main.yaml
new file mode 100644
index 0000000..31d3584
--- /dev/null
+++ b/ansible/roles/kubernetes_cilium/tasks/main.yaml
@@ -0,0 +1,17 @@
+- name: Ensure Cilium repository exists
+  kubernetes.core.helm_repository:
+    name: cilium
+    url: https://helm.cilium.io/
+
+- name: Ensure Cilium is installed
+  kubernetes.core.helm:
+    release_name: cilium
+    release_namespace: kube-system
+    chart_ref: cilium/cilium
+    chart_version: 1.19.5
+    values:
+      ipam:
+        operator:
+          clusterPoolIPv4PodCIDRList:
+            - "{{ cluster_pod_subnet }}"
+  run_once: true