According to the errors in the logs, cillium also requires the following modules - iptable_mangle - iptable_raw - xt_socket