diff --git a/talos/install-cilium.sh b/talos/install-cilium.sh
new file mode 100644
index 0000000..051a80f
--- /dev/null
+++ b/talos/install-cilium.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+cilium install --helm-set=ipam.mode=kubernetes --helm-set=kubeProxyReplacement=true --helm-set=securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" --helm-set=securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" --helm-set=cgroup.autoMount.enabled=false --helm-set=cgroup.hostRoot=/sys/fs/cgroup --helm-set=k8sServiceHost=localhost --helm-set=k8sServicePort=7445