diff --git a/k8s/apps/mtproxy/secret-reader-ingress.yaml b/k8s/apps/mtproxy/secret-reader-ingress.yaml
index 77d263f..8ac47f9 100644
--- a/k8s/apps/mtproxy/secret-reader-ingress.yaml
+++ b/k8s/apps/mtproxy/secret-reader-ingress.yaml
@@ -13,7 +13,7 @@ spec:
       kind: Rule
       middlewares:
         - name: keycloak-auth
-          namespace: oauth2-proxy
+          namespace: kube-system
       services:
         - name: secret-reader
           port: 80
diff --git a/k8s/core/oauth2-proxy/middleware.yaml b/k8s/core/oauth2-proxy/middleware.yaml
index 613e448..5fa7302 100644
--- a/k8s/core/oauth2-proxy/middleware.yaml
+++ b/k8s/core/oauth2-proxy/middleware.yaml
@@ -3,6 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: keycloak-auth
+  namespace: kube-system
 spec:
   forwardAuth:
     address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
@@ -11,4 +12,3 @@ spec:
       - X-Auth-Request-User
       - X-Auth-Request-Email
       - X-Auth-Request-Groups
-      - Authorization