diff --git a/apps/base/customer1/apigateway.yaml b/apps/base/customer1/apigateway.yaml
index f633b61..4e1d9ac 100644
--- a/apps/base/customer1/apigateway.yaml
+++ b/apps/base/customer1/apigateway.yaml
@@ -2,7 +2,9 @@ apiVersion: gateway.networking.k8s.io/v1
 kind: Gateway
 metadata:
   name: external-http-gateway
-  namespace: customer1  
+  namespace: customer1
+  annotations:
+    networking.gke.io/certmap: devops-lab-cert-map
 spec:
   gatewayClassName: gke-l7-global-external-managed  # Use gke-l7-global-external-http for external, or gke-l7-rilb for internal
   listeners: