diff --git a/pkg/minikube/bootstrapper/images/images.go b/pkg/minikube/bootstrapper/images/images.go
index 3e2168c3ecad..1036f0e0cea2 100644
--- a/pkg/minikube/bootstrapper/images/images.go
+++ b/pkg/minikube/bootstrapper/images/images.go
@@ -185,7 +185,7 @@ func KindNet(repo string) string {
 }
 
 // all calico images are from https://github.com/projectcalico/calico/blob/master/manifests/calico.yaml
-const calicoVersion = "v3.30.3"
+const calicoVersion = "v3.30.4"
 const calicoRepo = "docker.io/calico"
 
 // CalicoDaemonSet returns the image used for calicoDaemonSet
diff --git a/pkg/minikube/cni/calico.yaml b/pkg/minikube/cni/calico.yaml
index cd28d1f464c4..515b757716c9 100644
--- a/pkg/minikube/cni/calico.yaml
+++ b/pkg/minikube/cni/calico.yaml
@@ -1326,6 +1326,11 @@ spec:
                   kube-proxy always accepts endpoint slices. This option will be removed in
                   the next release.
                 type: boolean
+              bpfKubeProxyHealtzPort:
+                description: |-
+                  BPFKubeProxyHealtzPort, in BPF mode, controls the port that Felix's embedded kube-proxy health check server binds to.
+                  The health check server is used by external load balancers to determine if this node should receive traffic.  [Default: 10256]
+                type: integer
               bpfKubeProxyIptablesCleanupEnabled:
                 description: |-
                   BPFKubeProxyIptablesCleanupEnabled, if enabled in BPF mode, Felix will proactively clean up the upstream
@@ -1464,6 +1469,10 @@ spec:
                 - Disabled
                 - L2Only
                 type: string
+              cgroupV2Path:
+                description: CgroupV2Path overrides the default location where to
+                  find the cgroup hierarchy.
+                type: string
               chainInsertMode:
                 description: |-
                   ChainInsertMode controls whether Felix hooks the kernel's top-level iptables chains by inserting a rule