diff --git a/README.md b/README.md
index 2fa3f651..d1defbe6 100644
--- a/README.md
+++ b/README.md
@@ -384,7 +384,7 @@ task cluster:resources
 
 ### 🌐 DNS
 
-📍 The [external-dns](https://github.com/kubernetes-sigs/external-dns) application created in the `networking` namespace will handle creating public DNS records. By default, `echo-server` is the only public domain exposed on your Cloudflare domain. In order to make additional applications public you must set an ingress annotation like in the `HelmRelease` for `echo-server`. You do not need to use Terraform to create additional DNS records unless you need a record outside the purposes of your Kubernetes cluster (e.g. setting up MX records).
+📍 The [external-dns](https://github.com/kubernetes-sigs/external-dns) application created in the `kube-system` namespace will handle creating public DNS records. By default, `echo-server` is the only public domain exposed on your Cloudflare domain. In order to make additional applications public you must set an ingress annotation like in the `HelmRelease` for `echo-server`. You do not need to use Terraform to create additional DNS records unless you need a record outside the purposes of your Kubernetes cluster (e.g. setting up MX records).
 
 [k8s_gateway](https://github.com/ori-edge/k8s_gateway) is deployed on the IP choosen for `${BOOTSTRAP_METALLB_K8S_GATEWAY_ADDR}`. Inorder to test DNS you can point your clients DNS to the `${BOOTSTRAP_METALLB_K8S_GATEWAY_ADDR}` IP address and load `https://hajimari.${BOOTSTRAP_CLOUDFLARE_DOMAIN}` in your browser.
 
diff --git a/cluster/apps/default/hajimari/helm-release.yaml b/cluster/apps/default/hajimari/helm-release.yaml
index 63403623..1f424152 100644
--- a/cluster/apps/default/hajimari/helm-release.yaml
+++ b/cluster/apps/default/hajimari/helm-release.yaml
@@ -28,7 +28,6 @@ spec:
       namespaceSelector:
         matchNames:
           - default
-          - networking
       name: "you"
       customApps:
         - name: Some External Cluster Service
diff --git a/tmpl/cluster/cert-manager-secret.sops.yaml b/tmpl/cluster/cert-manager-secret.sops.yaml
index 95130d24..38c38c85 100644
--- a/tmpl/cluster/cert-manager-secret.sops.yaml
+++ b/tmpl/cluster/cert-manager-secret.sops.yaml
@@ -3,6 +3,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: cloudflare-api-key
-  namespace: networking
+  namespace: kube-system
 stringData:
     api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}
diff --git a/tmpl/cluster/cloudflare-ddns-secret.sops.yaml b/tmpl/cluster/cloudflare-ddns-secret.sops.yaml
index 9b6a330f..107ad30a 100644
--- a/tmpl/cluster/cloudflare-ddns-secret.sops.yaml
+++ b/tmpl/cluster/cloudflare-ddns-secret.sops.yaml
@@ -3,7 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: cloudflare-ddns
-  namespace: networking
+  namespace: kube-system
 type: Opaque
 stringData:
     CLOUDFLARE_EMAIL: ${BOOTSTRAP_CLOUDFLARE_EMAIL}
diff --git a/tmpl/cluster/external-dns-secret.sops.yaml b/tmpl/cluster/external-dns-secret.sops.yaml
index 6362ae1d..b6316acb 100644
--- a/tmpl/cluster/external-dns-secret.sops.yaml
+++ b/tmpl/cluster/external-dns-secret.sops.yaml
@@ -3,7 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: external-dns-cloud-credentials
-  namespace: networking
+  namespace: kube-system
 stringData:
     email: ${BOOTSTRAP_CLOUDFLARE_EMAIL}
     api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}