diff --git a/kube/deploy/core/ingress/ingress-nginx/app/common-values.yaml b/kube/deploy/core/ingress/ingress-nginx/app/common-values.yaml
index f20b478c..16af019a 100644
--- a/kube/deploy/core/ingress/ingress-nginx/app/common-values.yaml
+++ b/kube/deploy/core/ingress/ingress-nginx/app/common-values.yaml
@@ -11,6 +11,7 @@ controller:
   extraArgs:
     default-backend-service: "ingress/default-backend"
   config:
+    annotations-risk-level: "Critical"
     enable-brotli: "true"
     enable-real-ip: "true"
     use-forwarded-headers: "true"