From ea0c22c24726f662c75f2a2d399450089d6747b1 Mon Sep 17 00:00:00 2001
From: pgijsbertsen <117165507+pgijsbertsen@users.noreply.github.com>
Date: Wed, 28 Jan 2026 12:13:08 +0100
Subject: [PATCH] fix(cilium): Allow envoy to bind on 80/443

---
 kustomize-bases/cilium/values.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kustomize-bases/cilium/values.yaml b/kustomize-bases/cilium/values.yaml
index 517230b..7553fad 100644
--- a/kustomize-bases/cilium/values.yaml
+++ b/kustomize-bases/cilium/values.yaml
@@ -42,6 +42,14 @@ hubble:
   ui:
     enabled: true
 
+envoy:
+  enabled: true
+  securityContext:
+    capabilities:
+      keepCapNetBindService: true
+      envoy:
+      - NET_BIND_SERVICE
+
 gatewayAPI:
   enabled: true
   enableAlpn: true