diff --git a/apps/notes/base/namespace.yaml b/apps/notes/base/namespace.yaml
index 72085ff..1ae00a7 100644
--- a/apps/notes/base/namespace.yaml
+++ b/apps/notes/base/namespace.yaml
@@ -5,3 +5,6 @@ metadata:
   name: notes
   labels:
     istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged
+
+