diff --git a/values/cilium/env-ekman.yaml.gotmpl b/values/cilium/env-ekman.yaml.gotmpl
index 39f1b42d..2d395026 100644
--- a/values/cilium/env-ekman.yaml.gotmpl
+++ b/values/cilium/env-ekman.yaml.gotmpl
@@ -10,3 +10,5 @@ cilium:
   # TODO: remove k8sServiceHost / k8sServicePort (or keep pointing at apiserver localhost)
   k8sServiceHost: 10.255.241.99
   k8sServicePort: 6443
+  policyAuditMode: true
+  upgradeCompatability: 1.18