diff --git a/apps/base/forecastle/namespace.yaml b/apps/base/forecastle/namespace.yaml
index b7c41132d84a7d021acb4a7cffb0b7ebfc26bffe..d44f877d726eddfa9be99379d9d3df6185f0eb22 100644
--- a/apps/base/forecastle/namespace.yaml
+++ b/apps/base/forecastle/namespace.yaml
@@ -4,7 +4,7 @@ metadata:
   name: forecastle
   labels:
     pod-security.kubernetes.io/audit: restricted
-    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/enforce: baseline
     pod-security.kubernetes.io/warn: restricted
     pod-security.kubernetes.io/audit-version: latest
     pod-security.kubernetes.io/enforce-version: latest
diff --git a/apps/base/iot/namespace.yaml b/apps/base/iot/namespace.yaml
index f3bc2f19fd78cf38ba4ed2ad380775a53ae2437a..cca0186356ad7079ba39c3a35907fc3bdb66522e 100644
--- a/apps/base/iot/namespace.yaml
+++ b/apps/base/iot/namespace.yaml
@@ -4,7 +4,7 @@ metadata:
   name: iot
   labels:
     pod-security.kubernetes.io/audit: restricted
-    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/enforce: baseline
     pod-security.kubernetes.io/warn: restricted
     pod-security.kubernetes.io/audit-version: latest
     pod-security.kubernetes.io/enforce-version: latest