diff --git a/releasenotes/notes/switch-to-geneve-96bf7ef7c53988f8.yaml b/releasenotes/notes/switch-to-geneve-96bf7ef7c53988f8.yaml
new file mode 100644
index 0000000..761b266
--- /dev/null
+++ b/releasenotes/notes/switch-to-geneve-96bf7ef7c53988f8.yaml
@@ -0,0 +1,3 @@
+---
+fixes:
+  - Switch Cilium to use Geneve tunnels instead of VXLAN.
diff --git a/roles/cilium/tasks/main.yml b/roles/cilium/tasks/main.yml
index f41d119..dadbf7e 100644
--- a/roles/cilium/tasks/main.yml
+++ b/roles/cilium/tasks/main.yml
@@ -20,6 +20,7 @@
     release_namespace: kube-system
     kubeconfig: /etc/kubernetes/admin.conf
     values:
+      tunnel: geneve
       operator:
         nodeSelector:
           openstack-control-plane: enabled