diff --git a/apps/traefik.yaml b/apps/traefik.yaml
index 938fa99..9b8bf21 100644
--- a/apps/traefik.yaml
+++ b/apps/traefik.yaml
@@ -15,7 +15,8 @@ spec:
           kubernetesGateway:
             enabled: true
           kubernetesCRD:
-            enabled: false
+            enabled: true
+            allowCrossNamespace: true
           kubernetesIngress:
             enabled: false
         gateway:
diff --git a/manifests/reference-grants.yaml b/manifests/reference-grants.yaml
new file mode 100644
index 0000000..5db51de
--- /dev/null
+++ b/manifests/reference-grants.yaml
@@ -0,0 +1,27 @@
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-traefik-gateway
+  namespace: longhorn-system
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      namespace: longhorn-system
+  to:
+    - group: ""
+      kind: Service
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-traefik-gateway
+  namespace: kube-system
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      namespace: kube-system
+  to:
+    - group: ""
+      kind: Service