From 7f52909ff253125f0524a5d905372cd80bad88f0 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Sun, 10 May 2026 16:58:04 -0500
Subject: [PATCH] feat: upgrade to v1.19

---
 clusters/cl01tl/helm/cilium/Chart.lock  |  6 +++---
 clusters/cl01tl/helm/cilium/Chart.yaml  |  4 ++--
 clusters/cl01tl/helm/cilium/values.yaml | 26 +------------------------
 3 files changed, 6 insertions(+), 30 deletions(-)

diff --git a/clusters/cl01tl/helm/cilium/Chart.lock b/clusters/cl01tl/helm/cilium/Chart.lock
index 857f8fe6c..ee64bff82 100644
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.3
+digest: sha256:0fb32249f6ab7d68568a1e44796a8ee1ee5da2294b29a9c720153db8f055888b
+generated: "2026-05-10T16:57:28.745-05:00"
diff --git a/clusters/cl01tl/helm/cilium/Chart.yaml b/clusters/cl01tl/helm/cilium/Chart.yaml
index e1c326271..10f3dfd4c 100644
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.3
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.3
diff --git a/clusters/cl01tl/helm/cilium/values.yaml b/clusters/cl01tl/helm/cilium/values.yaml
index b41d990df..20bfa1cbc 100644
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -1,32 +1,11 @@
 cilium:
+  upgradeCompatibility: "1.19"
   k8sServiceHost: "localhost"
   k8sServicePort: "7445"
   k8sClientRateLimit:
     qps: 50
     burst: 100
   rollOutCiliumPods: true
-  securityContext:
-    capabilities:
-      ciliumAgent:
-        - CHOWN
-        - KILL
-        - NET_ADMIN
-        - NET_RAW
-        - IPC_LOCK
-        - SYS_ADMIN
-        - SYS_RESOURCE
-        - DAC_OVERRIDE
-        - FOWNER
-        - SETGID
-        - SETUID
-        - PERFMON
-        - BPF
-      cleanCiliumState:
-        - NET_ADMIN
-        - SYS_ADMIN
-        - SYS_RESOURCE
-  bgpControlPlane:
-    enabled: false
   bpf:
     hostLegacyRouting: true
   devices: end0 enp6s0
@@ -36,9 +15,6 @@ cilium:
     enabled: true
     enableAppProtocol: true
     enableAlpn: true
-    secretsNamespace:
-      create: false
-      name: kube-system
   socketLB:
     enabled: true
     hostNamespaceOnly: true