diff --git a/infrastructure/kyverno/deny-system-namespaces.yaml b/infrastructure/kyverno/deny-system-namespaces.yaml
index 388ef889a4ef6d6e8e80c4f9f95c7f26a3c092da..cda26c8a7ae241e6ff132c816326432862cf8027 100644
--- a/infrastructure/kyverno/deny-system-namespaces.yaml
+++ b/infrastructure/kyverno/deny-system-namespaces.yaml
@@ -15,6 +15,7 @@ spec:
     exclude:
       clusterRoles:
       - cluster-admin
+      - tigera-operator
     validate:
       message: "Creating *-system namespaces is not allowed."
       deny: {}