diff --git a/values/cilium/env-hel1.yaml.gotmpl b/values/cilium/env-hel1.yaml.gotmpl
new file mode 100644
index 00000000..0f2f672d
--- /dev/null
+++ b/values/cilium/env-hel1.yaml.gotmpl
@@ -0,0 +1,10 @@
+cilium:
+  enabled: true
+  nodePort:
+    enabled: true
+  l2announcement:
+    enabled: true
+  gatewayAPI:
+    enabled: true
+  gatewayTest:
+    enabled: true
diff --git a/values/cilium/env.yaml.gotmpl b/values/cilium/env.yaml.gotmpl
index 99f6c080..b15cb8db 100644
--- a/values/cilium/env.yaml.gotmpl
+++ b/values/cilium/env.yaml.gotmpl
@@ -19,6 +19,8 @@ cilium:
   # NOTE: Requires that ingresscontroller is also enabled
   gatewayAPI:
     enabled: false
+  gatewayTest:
+    enabled: false
   ingressController:
     enabled: false
     defaultClass: false
diff --git a/values/cilium/values/cilium.yaml.gotmpl b/values/cilium/values/cilium.yaml.gotmpl
index 14fe29bb..45eee644 100644
--- a/values/cilium/values/cilium.yaml.gotmpl
+++ b/values/cilium/values/cilium.yaml.gotmpl
@@ -61,6 +61,22 @@ nodePort:
   enabled: {{ .Values.cilium.nodePort.enabled }}
 gatewayAPI:
   enabled: {{ .Values.cilium.gatewayAPI.enabled }}
+{{- if .Values.cilium.gatewayTest.enabled }}
+  hostNetwork:
+    enabled: true
+    nodes:
+      matchLabels:
+        ingresshost: "cilium"
+envoy:
+  enabled: true
+  securityContext:
+    capabilities:
+      keepCapNetBindService: true
+      envoy:
+        - NET_ADMIN
+        - BPF
+        - NET_BIND_SERVICE
+{{- end}}
 ingressController:
   enabled: {{ .Values.cilium.ingressController.enabled }}
   default: {{ .Values.cilium.ingressController.defaultClass }}