diff --git a/CHANGELOG.md b/CHANGELOG.md
index 336614de..cfb8f114 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add teleport.service: Secure SSH access via Teleport.
 - Add `controlPlane.loadBalancerIngressAllowCidrBlocks` to configure control plane load balancer ingress rules.
 
+### Changed
+
+- Bump `coredns` version to `1.19.0` and fix values.
+
 ## [0.45.0] - 2023-10-04
 
 ### Added
diff --git a/helm/cluster-aws/templates/coredns-helmrelease.yaml b/helm/cluster-aws/templates/coredns-helmrelease.yaml
index 0046b35a..6618961c 100644
--- a/helm/cluster-aws/templates/coredns-helmrelease.yaml
+++ b/helm/cluster-aws/templates/coredns-helmrelease.yaml
@@ -16,7 +16,7 @@ spec:
       chart: coredns-app
       # used by renovate
       # repo: giantswarm/coredns-app
-      version: 1.17.0
+      version: 1.19.0
       sourceRef:
         kind: HelmRepository
         name: {{ include "resource.default.name" $ }}-default
@@ -35,9 +35,9 @@ spec:
   values:
     cluster:
       calico:
-        CIDR: {{ .Values.connectivity.network.podCidr | quote }}
+        CIDR: {{ first .Values.connectivity.network.pods.cidrBlocks | quote }}
       kubernetes:
         API:
-          clusterIPRange: {{ .Values.connectivity.network.serviceCidr | quote }}
+          clusterIPRange: {{ first .Values.connectivity.network.services.cidrBlocks | quote }}
         DNS:
           IP: {{ include "clusterDNS" $ | quote }}