kubespray/roles/network_plugin/calico/tasks/main.yml

---
- include_tasks: check.yml

- include_tasks: pre.yml

- include_tasks: upgrade.yml
  when:
    - calico_upgrade_needed
  run_once: yes
  delegate_to: "{{ groups['kube-master'][0] }}"

- include_tasks: install.yml