diff --git a/tmpl/cluster/cert-manager-secret.sops.yaml b/tmpl/cluster/cert-manager-secret.sops.yaml
index 38c38c85..95130d24 100644
--- a/tmpl/cluster/cert-manager-secret.sops.yaml
+++ b/tmpl/cluster/cert-manager-secret.sops.yaml
@@ -3,6 +3,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: cloudflare-api-key
-  namespace: kube-system
+  namespace: networking
 stringData:
     api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}