diff --git a/apps/contracts/base/namespace.yaml b/apps/contracts/base/namespace.yaml
index 816bf00..142ae3a 100644
--- a/apps/contracts/base/namespace.yaml
+++ b/apps/contracts/base/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: contracts
   labels:
     istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged