diff --git a/.github/in-cluster-test-scripts/external-workloads-install.sh b/.github/in-cluster-test-scripts/external-workloads-install.sh
index e735d4a7e1..546bebf0f8 100644
--- a/.github/in-cluster-test-scripts/external-workloads-install.sh
+++ b/.github/in-cluster-test-scripts/external-workloads-install.sh
@@ -9,7 +9,7 @@ cilium install \
   --version "${CILIUM_VERSION}" \
   --cluster-name "${CLUSTER_NAME}" \
   --set bpf.monitorAggregation=none \
-  --set routingMode=tunnel \
+  --datapath-mode=tunnel \
   --set kubeProxyReplacement=strict \
   --set loadBalancer.l7.backend=envoy \
   --set tls.secretsBackend=k8s \
diff --git a/.github/workflows/aks-byocni.yaml b/.github/workflows/aks-byocni.yaml
index 302d285b06..ace850b5ff 100644
--- a/.github/workflows/aks-byocni.yaml
+++ b/.github/workflows/aks-byocni.yaml
@@ -39,7 +39,7 @@ env:
   location: westeurope
   cost_reduction: --node-vm-size Standard_B2s --node-osdisk-size 30
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/eks-tunnel.yaml b/.github/workflows/eks-tunnel.yaml
index 2cd2560960..9607645c96 100644
--- a/.github/workflows/eks-tunnel.yaml
+++ b/.github/workflows/eks-tunnel.yaml
@@ -29,7 +29,7 @@ env:
   region: us-east-2
   eksctl_version: v0.147.0
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/eks.yaml b/.github/workflows/eks.yaml
index 7d57c674bc..cc90aaf602 100644
--- a/.github/workflows/eks.yaml
+++ b/.github/workflows/eks.yaml
@@ -29,7 +29,7 @@ env:
   region: us-east-2
   eksctl_version: v0.147.0
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/externalworkloads.yaml b/.github/workflows/externalworkloads.yaml
index 0899551e8e..703db5939c 100644
--- a/.github/workflows/externalworkloads.yaml
+++ b/.github/workflows/externalworkloads.yaml
@@ -29,7 +29,7 @@ env:
   zone: us-west2-a
   vmStartupScript: .github/gcp-vm-startup.sh
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
 
diff --git a/.github/workflows/gke.yaml b/.github/workflows/gke.yaml
index 2680fb266d..e725cc1f2c 100644
--- a/.github/workflows/gke.yaml
+++ b/.github/workflows/gke.yaml
@@ -28,7 +28,7 @@ concurrency:
 env:
   zone: us-west2-a
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
 
diff --git a/.github/workflows/kind.yaml b/.github/workflows/kind.yaml
index 4c51d19ea7..4e7e1cc8f2 100644
--- a/.github/workflows/kind.yaml
+++ b/.github/workflows/kind.yaml
@@ -17,7 +17,7 @@ env:
   TIMEOUT: 2m
   LOG_TIME: 30m
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index ceff54780a..bdaccd95f4 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -28,7 +28,7 @@ concurrency:
 env:
   zone: us-west2-a
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.14.2
+  cilium_version: v1.14.4
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
 
diff --git a/defaults/defaults.go b/defaults/defaults.go
index 712c756852..1b0903bcf6 100644
--- a/defaults/defaults.go
+++ b/defaults/defaults.go
@@ -7,7 +7,7 @@ import "time"
 
 const (
 	// renovate: datasource=github-releases depName=cilium/cilium
-	Version = "v1.14.2"
+	Version = "v1.14.4"
 
 	AgentContainerName      = "cilium-agent"
 	AgentServiceAccountName = "cilium"