diff --git a/kube/deploy/vm/_kubevirt/kustomization.yaml b/kube/deploy/vm/_kubevirt/kustomization.yaml
index 4bb5fc96..3d81a8f1 100644
--- a/kube/deploy/vm/_kubevirt/kustomization.yaml
+++ b/kube/deploy/vm/_kubevirt/kustomization.yaml
@@ -2,6 +2,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ns.yaml
   - repo.yaml
   - ks.yaml
   - netpol.yaml
diff --git a/kube/deploy/vm/_kubevirt/ns.yaml b/kube/deploy/vm/_kubevirt/ns.yaml
new file mode 100644
index 00000000..72bae76a
--- /dev/null
+++ b/kube/deploy/vm/_kubevirt/ns.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kubevirt
+  labels:
+    pod-security.kubernetes.io/enforce: "privileged"
+    kubevirt.io: ""