diff --git a/apps/nginx-weighted/canary-proxy-svc.yaml b/apps/nginx-weighted/canary-proxy-svc.yaml
new file mode 100644
index 0000000..1afe9ee
--- /dev/null
+++ b/apps/nginx-weighted/canary-proxy-svc.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx-canary-proxy
+  namespace: nginx-mcp
+  labels:
+    app: nginx-canary-proxy
+  annotations:
+    description: >
+      ExternalName proxy required because Traefik v3 does not allow
+      cross-namespace service references inside TraefikService weighted config.
+      This service bridges nginx-mcp namespace → nginx-canary namespace.
+spec:
+  type: ExternalName
+  externalName: nginx-canary.nginx-canary.svc.cluster.local
+  ports:
+    - port: 80
+      targetPort: 80