diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3101cc55..49791509 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 
 - Bump `clustertest` to v0.14.0 that increased the char count of cluster names to 20 chars
+- CAPV: WCs have the default deny-all network policies 
 
 ## [1.19.3] - 2023-12-05
 
diff --git a/providers/capv/standard/test_data/cluster_values.yaml b/providers/capv/standard/test_data/cluster_values.yaml
index a4fd7444..04954f25 100644
--- a/providers/capv/standard/test_data/cluster_values.yaml
+++ b/providers/capv/standard/test_data/cluster_values.yaml
@@ -26,7 +26,6 @@ connectivity:
   bastion:
     enabled: true
   network:
-    allowAllEgress: true
     controlPlaneEndpoint:
       host: ""  # [string] Manually select an IP for kube API. "" for auto selection from the ipPoolName pool.
       port: 6443