diff --git a/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/domain.yml b/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/domain.yml
index 5875ec6..92928d6 100644
--- a/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/domain.yml
+++ b/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/domain.yml
@@ -1,10 +1,9 @@
 ---
 global:
+
+    # the ingress is manages directly by the Route manifests ../manifest/routes.yml
     ingress:
-        enabled: true
-        host: ${DOMAIN_NAME}
-        tls:
-            enabled: true
+        enabled: false
 
     identity:
 
diff --git a/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/zeebe-gateway-route.yml b/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/zeebe-gateway-route.yml
index 3a06111..3d83599 100644
--- a/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/zeebe-gateway-route.yml
+++ b/aws/rosa-hcp/camunda-versions/8.7/procedure/install/helm-values/zeebe-gateway-route.yml
@@ -18,7 +18,7 @@ zeebeGateway:
                 # this is the external route certificate
                 secretName: camunda-platform-external-certificate
         hosts:
-            - host: zeebe.${DOMAIN_NAME}
+            - host: zeebe-${DOMAIN_NAME}
 
     # mount the Service certificate in the pod
     env:
diff --git a/aws/rosa-hcp/camunda-versions/8.7/procedure/manifests/routes.yml b/aws/rosa-hcp/camunda-versions/8.7/procedure/manifests/routes.yml
new file mode 100644
index 0000000..e8de255
--- /dev/null
+++ b/aws/rosa-hcp/camunda-versions/8.7/procedure/manifests/routes.yml
@@ -0,0 +1,112 @@
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-platform
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-keycloak
+    port:
+        targetPort: 80
+    path: /auth/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-identity
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-identity
+    port:
+        targetPort: 80
+    path: /identity/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-operate
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-operate
+    port:
+        targetPort: 80
+    path: /operate/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-optimize
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-optimize
+    port:
+        targetPort: 80
+    path: /optimize/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-tasklist
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-tasklist
+    port:
+        targetPort: 80
+    path: /tasklist/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-zeebe-gateway
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-zeebe-gateway
+    port:
+        targetPort: 8080
+    path: /zeebe/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-console
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-console
+    port:
+        targetPort: 80
+    path: /console/
+---
+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+    name: route-camunda-webmodeler-restapi
+spec:
+    host: ${DOMAIN_NAME}
+    to:
+        kind: Service
+        name: camunda-webmodeler-restapi
+    port:
+        targetPort: 80
+    path: /modeler/