Helm: Clean up deprecated values

Documentation/operations/upgrade.rst

@@ -379,6 +379,26 @@ Helm Options
 * Following the deprecation of the ``tunnel`` agent flag, ``tunnel`` is being
   deprecated in favor of ``routingMode`` and ``tunnelProtocol`` and will be
   removed in v1.15.
+* Values ``encryption.keyFile``, ``encryption.mountPath``,
+  ``encryption.secretName`` and ``encryption.interface`` are deprecated in
+  favor of their ``encryption.ipsec.*`` counterparts and will be removed in
+  Cilium 1.15.
+* Value ``hubble.peerService.enabled`` was deprecated in Cilium 1.13 and has
+  been removed. The peer service is no longer optional.
+* Values ``hubble.tls.ca``, ``hubble.tls.ca.cert`` and ``hubble.tls.ca.key``
+  were deprecated in Cilium 1.12 in favor of ``tls.ca``, ``tls.ca.cert`` and
+  ``tls.ca.key`` respectively, and have been removed.
+* Value ``hubble.ui.securityContext.enabled`` was deprecated in Cilium 1.12 in
+  favor of ``hubble.ui.securityContext``, and has been removed.
+* Values ``ipam.operator.clusterPoolIPv4PodCIDR`` and
+  ``ipam.operator.clusterPoolIPv6PodCIDR`` were deprecated in Cilium 1.11 in
+  favor of ``ipam.operator.clusterPoolIPv4PodCIDRList`` and
+  ``ipam.operator.clusterPoolIPv6PodCIDRList``, respectively, and have been
+  removed.
+  In order to preserve the default behavior for selecting CIDRs when default
+  values are kept, ``ipam.operator.clusterPoolIPv4PodCIDRList`` now defaults to
+  a singleton containing the default CIDR value for the removed value
+  ``ipam.operator.clusterPoolIPv4PodCIDR`` (and similarly for IPv6).
 
 .. _earlier_upgrade_notes: