diff --git a/k8s/zero/deployment/env.yaml b/k8s/zero/deployment/env.yaml
index c06c4d897..6cb28d7f9 100644
--- a/k8s/zero/deployment/env.yaml
+++ b/k8s/zero/deployment/env.yaml
@@ -22,7 +22,7 @@ spec:
             - name: BOOTSTRAP_CONFIG_FILE
               value: "/var/run/secrets/pomerium/bootstrap.dat"
             - name: BOOTSTRAP_CONFIG_WRITEBACK_URI
-              value: "secret://pomerium-zero/pomerium/bootstrap"
+              value: "secret://$(POMERIUM_NAMESPACE)/pomerium/bootstrap"
             - name: POD_IP
               valueFrom:
                 fieldRef:
diff --git a/k8s/zero/deployment/volumes.yaml b/k8s/zero/deployment/volumes.yaml
index 7776fa579..15475674c 100644
--- a/k8s/zero/deployment/volumes.yaml
+++ b/k8s/zero/deployment/volumes.yaml
@@ -27,6 +27,7 @@ spec:
           emptyDir: {}
         - name: bootstrap
           secret:
+            optional: true
             secretName: pomerium
             items:
               - key: bootstrap