diff --git a/nix/kubernetes/keys/package/bootstrap-script/package.nix b/nix/kubernetes/keys/package/bootstrap-script/package.nix
index cd2995ce..28647b75 100644
--- a/nix/kubernetes/keys/package/bootstrap-script/package.nix
+++ b/nix/kubernetes/keys/package/bootstrap-script/package.nix
@@ -10,6 +10,7 @@
 {
   lib,
   stdenv,
+  fetchFromGitHub,
   writeShellScript,
   k8s,
   ...
@@ -46,31 +47,25 @@ let
     )
   );
   apply_manifests = "kubectl --kubeconfig=${k8s.client-configs.admin}/admin.kubeconfig apply --server-side --force-conflicts -f ${manifests}";
+  gateway_crds_repo = fetchFromGitHub {
+    owner = "kubernetes-sigs";
+    repo = "gateway-api";
+    rev = "v1.4.1";
+    sha256 = "sha256-/GHyikcC2QGDN0ndpY6/xvSEEnpSsLrNU+lFElCKBs8=";
+  };
   gateway_crds = [
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_backendtlspolicies.yaml";
-      sha256 = "0kspa45s5kmbw8gm74r1wnj1chb8k8nnfvisnljnrawwq6q38kzr";
-    })
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_gatewayclasses.yaml";
-      sha256 = "1j78da9p6ndqp199f6rmz7dxxzpirag6v10ncscs992yjv9qm5bx";
-    })
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_gateways.yaml";
-      sha256 = "0vmsydfbizdlp7kcc529k6b6h7sy6xbdv7cccrxij7whzhjs8bm0";
-    })
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_grpcroutes.yaml";
-      sha256 = "1asd3kjglxn7ygcp2bmy98b4v40nzgz8snlyc355285k5js6h85p";
-    })
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_httproutes.yaml";
-      sha256 = "055grkxs7zwxdwykhwj2vpzwj1i0cgp8ihp9ja93379h49y7gilq";
-    })
-    (builtins.fetchurl {
-      url = "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/refs/tags/v1.4.1/config/crd/standard/gateway.networking.k8s.io_referencegrants.yaml";
-      sha256 = "11351y1aq7q5lbib6h2n1vil06h143bs44ywsv2g9500x7wc4kyp";
-    })
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_backendtlspolicies.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_referencegrants.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.x-k8s.io_xmeshes.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_gatewayclasses.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_udproutes.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.x-k8s.io_xbackendtrafficpolicies.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_gateways.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.x-k8s.io_xlistenersets.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_tcproutes.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_httproutes.yaml"
+    "${gateway_crds_repo}/config/crd/experimental/gateway.networking.k8s.io_grpcroutes.yaml"
   ];
 in
 stdenv.mkDerivation (finalAttrs: {