diff --git a/modules/ossm-control-plane-deploy.adoc b/modules/ossm-control-plane-deploy.adoc
index 78e3f8f5b641..1ff69200a588 100644
--- a/modules/ossm-control-plane-deploy.adoc
+++ b/modules/ossm-control-plane-deploy.adoc
@@ -96,7 +96,7 @@ apiVersion: maistra.io/v2
 kind: ServiceMeshControlPlane
 metadata:
   name: basic
-  namespace: openshift-operators
+  namespace: istio-system
 spec:
   version: v2.0
   tracing:
diff --git a/modules/ossm-rn-known-issues.adoc b/modules/ossm-rn-known-issues.adoc
index 6ced2d5fcad5..e8ef336bc59a 100644
--- a/modules/ossm-rn-known-issues.adoc
+++ b/modules/ossm-rn-known-issues.adoc
@@ -26,6 +26,8 @@ These limitations exist in {ProductName}:
 
 These are the known issues in {ProductName}:
 
+* link:https://issues.redhat.com/browse/MAISTRA-2010[MAISTRA-2010] AuthorizationPolicy does not support `request.regex.headers` field. The `validatingwebhook` rejects any AuthorizationPolicy with the field, and even if you disable that, Pilot tries to validate it using the same code, and it does not work. The issue was fixed in 1.1, but not 2.0.
+
 * link:https://issues.jboss.org/browse/MAISTRA-1088[MAISTRA-1088]/link:https://issues.jboss.org/browse/MAISTRA-1621[MAISTRA-1621] 2.0 Migration Issues
 ** Gateways created in a non-control plane namespace will not be automatically deleted.  Users will need to manually delete these resources after removing the gateway definition from the SMCP spec.
 ** Prometheus scraping (`spec.addons.prometheus.scrape` set to `true`) does not work when mTLS is enabled.  Additionally, Kiali displays extraneous graph data when mTLS is disabled.