diff --git a/applications/authentik/ldap/tcproute.yaml b/applications/authentik/ldap/tcproute.yaml
index 33d66b3..ba33022 100644
--- a/applications/authentik/ldap/tcproute.yaml
+++ b/applications/authentik/ldap/tcproute.yaml
@@ -20,3 +20,6 @@ spec:
     - backendRefs:
         - name: authentik-ldap
           port: 3389
+          kind: Service
+          group: ""
+          weight: 1
diff --git a/infra/envoy-gateway/authentik/authentik-ldap-gateway-patch.yaml b/infra/envoy-gateway/authentik/authentik-ldap-gateway-patch.yaml
index 6fbdc0c..a2cef10 100644
--- a/infra/envoy-gateway/authentik/authentik-ldap-gateway-patch.yaml
+++ b/infra/envoy-gateway/authentik/authentik-ldap-gateway-patch.yaml
@@ -8,7 +8,8 @@
     port: 389
     allowedRoutes:
       kinds:
-        - kind: TCPRoute
+        - group: gateway.networking.k8s.io
+          kind: TCPRoute
       namespaces:
         from: Selector
         selector:
@@ -24,12 +25,14 @@
     tls:
       mode: Terminate
       certificateRefs:
-        - kind: Secret
+        - group: ""
+          kind: Secret
           name: authentik-ldap-tls
           namespace: envoy-gateway
     allowedRoutes:
       kinds:
-        - kind: TCPRoute
+        - group: gateway.networking.k8s.io
+          kind: TCPRoute
       namespaces:
         from: Selector
         selector: