diff --git a/apps/templates/traefik.yaml b/apps/templates/traefik.yaml
index e9fe2a6..c2739b1 100644
--- a/apps/templates/traefik.yaml
+++ b/apps/templates/traefik.yaml
@@ -19,40 +19,42 @@ spec:
             name: *traefikImage
             tag: v2.8.0
             pullPolicy: IfNotPresent
-          additionalContainers:
-            # https://docs.datadoghq.com/developers/dogstatsd/unix_socket/?tab=host
-            - name: cloudflare
-              image: cloudflare/cloudflared:2022.6.3
-              args: ["tunnel", "--no-autoupdate", "run", "--token", "$(cloudflared)"]
-              resources:
-                limits:
-                  cpu: "800m"
-                  memory: "100Mi"
-                requests:
-                  cpu: "300m"
-                  memory: "40Mi"
-              envFrom:
-                - secretRef:
-                    name: cloudflared-secrets
-            - image: ghcr.io/roxedus/pipelines:traefik-cloudflare-tunnel-cca7aa94
-              name: auto-cloudflare
-              resources:
-                limits:
-                  cpu: "800m"
-                  memory: "100Mi"
-                requests:
-                  cpu: "300m"
-                  memory: "40Mi"
-              envFrom:
-                - secretRef:
-                    name: auto-cloudflared-secrets
-              env:
-                - name: TRAEFIK_SERVICE_ENDPOINT
-                  value: http://localhost:8000
-                - name: TRAEFIK_API_ENDPOINT
-                  value: http://localhost:9000
-                - name: TRAEFIK_ENTRYPOINT
-                  value: web
+          deployment:
+            additionalContainers:
+              # https://docs.datadoghq.com/developers/dogstatsd/unix_socket/?tab=host
+              - name: cloudflare
+                image: cloudflare/cloudflared:2022.6.3
+                args: ["tunnel", "--no-autoupdate", "run", "--token", "$(cloudflared)"]
+                resources:
+                  limits:
+                    cpu: "800m"
+                    memory: "100Mi"
+                  requests:
+                    cpu: "300m"
+                    memory: "40Mi"
+                envFrom:
+                  - secretRef:
+                      name: cloudflared-secrets
+              - image: ghcr.io/roxedus/pipelines:traefik-cloudflare-tunnel-cca7aa94
+                name: auto-cloudflare
+                resources:
+                  limits:
+                    cpu: "800m"
+                    memory: "100Mi"
+                  requests:
+                    cpu: "300m"
+                    memory: "40Mi"
+                envFrom:
+                  - secretRef:
+                      name: auto-cloudflared-secrets
+                env:
+                  - name: TRAEFIK_SERVICE_ENDPOINT
+                    value: http://localhost:8000
+                  - name: TRAEFIK_API_ENDPOINT
+                    value: http://localhost:9000
+                  - name: TRAEFIK_ENTRYPOINT
+                    value: web
+
           pilot:
             enabled: true