diff --git a/cluster/platform/cilium-config/values.yaml b/cluster/platform/cilium-config/values.yaml
index 1267df8..35fc7c8 100644
--- a/cluster/platform/cilium-config/values.yaml
+++ b/cluster/platform/cilium-config/values.yaml
@@ -10,7 +10,10 @@ k8sServiceHost: 10.1.71.65
 k8sServicePort: 6443
 ipam:
   mode: kubernetes
-tunnel: vxlan
+
+# Routing mode — replaces deprecated 'tunnel' value in Cilium 1.15+
+routingMode: tunnel
+tunnelProtocol: vxlan
 
 # L2 announcements — ARP-based LB IP advertisement
 l2announcements: