diff --git a/common/istio-1-24/istio-install/base/gateway.yaml b/common/istio-1-24/istio-install/base/gateway.yaml
index 28ae654e1b..7fc394d877 100644
--- a/common/istio-1-24/istio-install/base/gateway.yaml
+++ b/common/istio-1-24/istio-install/base/gateway.yaml
@@ -2,6 +2,7 @@ apiVersion: networking.istio.io/v1alpha3
 kind: Gateway
 metadata:
   name: istio-ingressgateway
+  namespace: istio-system
   labels:
     release: istio
 spec:
diff --git a/common/istio-cni-1-24/istio-install/base/gateway.yaml b/common/istio-cni-1-24/istio-install/base/gateway.yaml
index 28ae654e1b..7fc394d877 100644
--- a/common/istio-cni-1-24/istio-install/base/gateway.yaml
+++ b/common/istio-cni-1-24/istio-install/base/gateway.yaml
@@ -2,6 +2,7 @@ apiVersion: networking.istio.io/v1alpha3
 kind: Gateway
 metadata:
   name: istio-ingressgateway
+  namespace: istio-system
   labels:
     release: istio
 spec:
diff --git a/common/istio-cni-1-24/istio-install/base/kustomization.yaml b/common/istio-cni-1-24/istio-install/base/kustomization.yaml
index 7d35289ee8..864b9c70f4 100644
--- a/common/istio-cni-1-24/istio-install/base/kustomization.yaml
+++ b/common/istio-cni-1-24/istio-install/base/kustomization.yaml
@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+#namespace: istio-system # this does not work, because the istio-cni daemonset should be in kube-system
+
 resources:
 - install.yaml
 - gateway_authorizationpolicy.yaml