diff --git a/apps/base/iot/namespace.yaml b/apps/base/iot/namespace.yaml
index c4863a108f62f0bf186e89c45b5727e6aec3cc66..f3bc2f19fd78cf38ba4ed2ad380775a53ae2437a 100644
--- a/apps/base/iot/namespace.yaml
+++ b/apps/base/iot/namespace.yaml
@@ -2,6 +2,13 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: iot
+  labels:
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/audit-version: latest
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/warn-version: latest
 ---
 apiVersion: v1
 kind: ServiceAccount