diff --git a/apps/cde/base/namespace.yaml b/apps/cde/base/namespace.yaml
index f080923..35c9fae 100644
--- a/apps/cde/base/namespace.yaml
+++ b/apps/cde/base/namespace.yaml
@@ -5,3 +5,4 @@ metadata:
   name: cde
   labels:
     istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged
\ No newline at end of file