diff --git a/cluster/platform/gateway/gateway.yaml b/cluster/platform/gateway/gateway.yaml
index 403af77..a813cb8 100644
--- a/cluster/platform/gateway/gateway.yaml
+++ b/cluster/platform/gateway/gateway.yaml
@@ -6,7 +6,7 @@
 # IP: 10.1.71.90 (first address in cilium-gateway LB pool)
 #
 # TLS terminated here using wildcard cert from cert-manager.
-# HTTP listener included for redirect (handled at HTTPRoute level).
+# HTTP listener included for potential redirect use at HTTPRoute level.
 # ------------------------------------------------------------------------------
 apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
@@ -30,8 +30,9 @@ spec:
       tls:
         mode: Terminate
         certificateRefs:
-          - name: fastpass-wildcard-tls
+          - group: ""
             kind: Secret
+            name: fastpass-wildcard-tls
       allowedRoutes:
         namespaces:
           from: All