diff --git a/apps/workspaces/base/namespace.yaml b/apps/workspaces/base/namespace.yaml
index 7790980..784e946 100644
--- a/apps/workspaces/base/namespace.yaml
+++ b/apps/workspaces/base/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: workspaces
   labels:
     istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged