Move cilium_deploy_additionnaly to kubespray-default (#12191)

Instead of using default(false) all over the place, use
kubespray-defaults

roles/network_plugin/cilium/defaults/main.yml

@@ -69,10 +69,6 @@ cilium_tofqdns_enable_poller: false
 # `cilium_enable_legacy_services` is deprecated in 1.6, removed in 1.9
 cilium_enable_legacy_services: false
 
-# Deploy cilium even if kube_network_plugin is not cilium.
-# This enables to deploy cilium alongside another CNI to replace kube-proxy.
-cilium_deploy_additionally: false
-
 # Auto direct nodes routes can be used to advertise pods routes in your cluster
 # without any tunelling (with `cilium_tunnel_mode` sets to `disabled`).
 # This works only if you have a L2 connectivity between all your nodes.

roles/network_plugin/cilium/tasks/check.yml

@@ -18,13 +18,13 @@
   when:
     - cilium_ipsec_enabled is defined
     - cilium_ipsec_enabled
-    - kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool
+    - kube_network_plugin == 'cilium' or cilium_deploy_additionally
 
 - name: Stop if kernel version is too low for Cilium Wireguard encryption
   assert:
     that: ansible_kernel.split('-')[0] is version('5.6.0', '>=')
   when:
-    - kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool
+    - kube_network_plugin == 'cilium' or cilium_deploy_additionally
     - cilium_encryption_enabled
     - cilium_encryption_type == "wireguard"
     - not ignore_assert_errors

roles/network_plugin/meta/main.yml

@@ -4,7 +4,7 @@ dependencies:
     when: kube_network_plugin != 'none'
 
   - role: network_plugin/cilium
-    when: kube_network_plugin == 'cilium' or cilium_deploy_additionally | default(false) | bool
+    when: kube_network_plugin == 'cilium' or cilium_deploy_additionally
     tags:
       - cilium