diff --git a/apps/base/artifactapi/gateway.yaml b/apps/base/artifactapi/gateway.yaml
index b0ea6ed..fae401c 100644
--- a/apps/base/artifactapi/gateway.yaml
+++ b/apps/base/artifactapi/gateway.yaml
@@ -31,6 +31,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: artifactapi-tls
         mode: Terminate
diff --git a/apps/base/cattle-system/gateway.yaml b/apps/base/cattle-system/gateway.yaml
index c81bfdf..134db9c 100644
--- a/apps/base/cattle-system/gateway.yaml
+++ b/apps/base/cattle-system/gateway.yaml
@@ -31,6 +31,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: rancher-tls
         mode: Terminate
diff --git a/apps/base/consul/gateway.yaml b/apps/base/consul/gateway.yaml
index 30d7e9f..8e3ff9c 100644
--- a/apps/base/consul/gateway.yaml
+++ b/apps/base/consul/gateway.yaml
@@ -35,7 +35,8 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: consul-tls
     - name: consul-svc
       port: 443
@@ -47,5 +48,6 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: consul-tls
diff --git a/apps/base/litellm/gateway.yaml b/apps/base/litellm/gateway.yaml
index 88d987a..1f68e97 100644
--- a/apps/base/litellm/gateway.yaml
+++ b/apps/base/litellm/gateway.yaml
@@ -31,6 +31,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: litellm-tls
         mode: Terminate
diff --git a/apps/base/paperclip/gateway.yaml b/apps/base/paperclip/gateway.yaml
index 5690450..a080642 100644
--- a/apps/base/paperclip/gateway.yaml
+++ b/apps/base/paperclip/gateway.yaml
@@ -31,6 +31,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: paperclip-tls
         mode: Terminate
diff --git a/apps/base/puppet/gateway_puppetboard.yaml b/apps/base/puppet/gateway_puppetboard.yaml
index 6b7d0a0..a1ecdc2 100644
--- a/apps/base/puppet/gateway_puppetboard.yaml
+++ b/apps/base/puppet/gateway_puppetboard.yaml
@@ -35,6 +35,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: puppetboard-tls
         mode: Terminate
diff --git a/apps/base/puppet/gateway_puppetdb.yaml b/apps/base/puppet/gateway_puppetdb.yaml
index d61ed86..56a4803 100644
--- a/apps/base/puppet/gateway_puppetdb.yaml
+++ b/apps/base/puppet/gateway_puppetdb.yaml
@@ -28,6 +28,7 @@ spec:
       protocol: HTTPS
       tls:
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: puppetdb-tls
         mode: Terminate
diff --git a/apps/base/vault/gateway.yaml b/apps/base/vault/gateway.yaml
index 7227dc7..2d9cbbf 100644
--- a/apps/base/vault/gateway.yaml
+++ b/apps/base/vault/gateway.yaml
@@ -35,7 +35,8 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: vault-tls
     - name: vault-direct
       port: 8200
@@ -46,5 +47,6 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - kind: Secret
+          - group: ""
+            kind: Secret
             name: vault-tls