feat: upgrade to v1.19

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.3
+digest: sha256:0fb32249f6ab7d68568a1e44796a8ee1ee5da2294b29a9c720153db8f055888b
+generated: "2026-05-10T16:57:28.745-05:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.3
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.3

clusters/cl01tl/helm/cilium/values.yaml

@@ -1,32 +1,11 @@
 cilium:
+  upgradeCompatibility: "1.19"
   k8sServiceHost: "localhost"
   k8sServicePort: "7445"
   k8sClientRateLimit:
     qps: 50
     burst: 100
   rollOutCiliumPods: true
-  securityContext:
-    capabilities:
-      ciliumAgent:
-        - CHOWN
-        - KILL
-        - NET_ADMIN
-        - NET_RAW
-        - IPC_LOCK
-        - SYS_ADMIN
-        - SYS_RESOURCE
-        - DAC_OVERRIDE
-        - FOWNER
-        - SETGID
-        - SETUID
-        - PERFMON
-        - BPF
-      cleanCiliumState:
-        - NET_ADMIN
-        - SYS_ADMIN
-        - SYS_RESOURCE
-  bgpControlPlane:
-    enabled: false
   bpf:
     hostLegacyRouting: true
   devices: end0 enp6s0
@@ -36,9 +15,6 @@ cilium:
     enabled: true
     enableAppProtocol: true
     enableAlpn: true
-    secretsNamespace:
-      create: false
-      name: kube-system
   socketLB:
     enabled: true
     hostNamespaceOnly: true