diff --git a/kustomize-bases/alloy/namespace.yaml b/kustomize-bases/alloy/namespace.yaml
index ef44880..1ffb5ec 100644
--- a/kustomize-bases/alloy/namespace.yaml
+++ b/kustomize-bases/alloy/namespace.yaml
@@ -3,3 +3,5 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: alloy
+  labels:
+    pod-security.kubernetes.io/enforce: privileged