diff --git a/values.yaml b/values.yaml
index b54d75d..78a0740 100644
--- a/values.yaml
+++ b/values.yaml
@@ -137,6 +137,15 @@ traefik:
   # every TCP-80 request bounce to TCP-443 with a 301 — applies
   # uniformly to all IngressRoutes on this cluster, no per-instance
   # Middleware or duplicate IngressRoute needed.
+  # KEDA HTTP add-on routing — Studio chart's IngressRoute lives in
+  # the per-instance tenants namespace but its backend Service lives
+  # in odoosky-system (where KEDA was installed by this chart in 0.7.4).
+  # Without allowCrossNamespace=true, Traefik silently returns 404 on
+  # the cross-ns reference. Enabling here unblocks every Studio across
+  # every tenant on every cluster — single platform-wide setting.
+  providers:
+    kubernetesCRD:
+      allowCrossNamespace: true
   ports:
     web:
       redirectTo: