diff --git a/kms/cr.yaml b/kms/cr.yaml
index 495fd31..0bc2f1b 100644
--- a/kms/cr.yaml
+++ b/kms/cr.yaml
@@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: kms-teddysun-role
-  namespace: default
+  namespace: kms
 rules:
   - apiGroups: [""]
     resources:
diff --git a/kms/crb.yaml b/kms/crb.yaml
index 35ec459..d3d51fc 100644
--- a/kms/crb.yaml
+++ b/kms/crb.yaml
@@ -3,10 +3,11 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: kms-teddysun-binding
+  namespace: kms
 subjects:
   - kind: ServiceAccount
     name: kms-service-account
-    namespace: default
+    namespace: kms
 roleRef:
   kind: ClusterRole
   name: kms-teddysun-role
diff --git a/kms/gateway.yaml b/kms/gateway.yaml
index 15e26ce..5201ba2 100644
--- a/kms/gateway.yaml
+++ b/kms/gateway.yaml
@@ -2,6 +2,7 @@ apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
   name: kms-gateway
+  namespace: kms
 spec:
   gatewayClassName: cilium
   listeners:
diff --git a/kms/sa.yaml b/kms/sa.yaml
index 64febf9..69c57e3 100644
--- a/kms/sa.yaml
+++ b/kms/sa.yaml
@@ -3,4 +3,4 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: kms-service-account
-  namespace: default
\ No newline at end of file
+  namespace: kms
\ No newline at end of file
diff --git a/kms/tcproute.yaml b/kms/tcproute.yaml
index 0f6b805..c7d4644 100644
--- a/kms/tcproute.yaml
+++ b/kms/tcproute.yaml
@@ -2,6 +2,7 @@ apiVersion: gateway.networking.k8s.io/v1
 kind: TCPRoute
 metadata:
   name: kms-route
+  namespace: kms
 spec:
   parentRefs:
     - name: kms-gateway