diff --git a/kustomize-bases/cilium/httproute.yaml b/kustomize-bases/cilium/httproute.yaml
index a6efb80..c7de402 100644
--- a/kustomize-bases/cilium/httproute.yaml
+++ b/kustomize-bases/cilium/httproute.yaml
@@ -5,8 +5,6 @@ metadata:
   name: http-filter-redirect
 spec:
   parentRefs:
-    - name: public
-      sectionName: http
     - name: internal
       sectionName: http
   rules:
diff --git a/kustomize-bases/cilium/values.yaml b/kustomize-bases/cilium/values.yaml
index 7a465d4..a0d5317 100644
--- a/kustomize-bases/cilium/values.yaml
+++ b/kustomize-bases/cilium/values.yaml
@@ -2,6 +2,9 @@ k8sServiceHost: localhost
 k8sServicePort: 7445
 kubeProxyReplacement: true
 
+ipam:
+  mode: kubernetes
+
 cgroup:
   hostRoot: /sys/fs/cgroup
   autoMount:
@@ -21,6 +24,7 @@ securityContext:
       - FOWNER
       - SETGID
       - SETUID
+      - CAP_SYS_ADMIN
     cleanCiliumState:
       - NET_ADMIN
       - SYS_ADMIN
@@ -39,6 +43,3 @@ gatewayAPI:
   enabled: true
   enableAlpn: true
   enableAppProtocol: true
-
-enableIPv4Masquerade: true
-enableMasqueradeRouteSource: true