diff --git a/linux/k3s/hetzner_csi_driver/templates/hcloud-volumes-encrypted.yml b/linux/k3s/hetzner_csi_driver/templates/hcloud-volumes-encrypted.yml
index ebadf77..b45a44f 100644
--- a/linux/k3s/hetzner_csi_driver/templates/hcloud-volumes-encrypted.yml
+++ b/linux/k3s/hetzner_csi_driver/templates/hcloud-volumes-encrypted.yml
@@ -10,4 +10,4 @@ volumeBindingMode: WaitForFirstConsumer
 allowVolumeExpansion: true
 parameters:
   csi.storage.k8s.io/node-publish-secret-name: encryption
-  csi.storage.k8s.io/node-publish-secret-namespace: default
+  csi.storage.k8s.io/node-publish-secret-namespace: kube-system