diff --git a/apps/logging/loki/application.yaml b/apps/logging/loki/application.yaml
index 2d5f096..136b5d6 100644
--- a/apps/logging/loki/application.yaml
+++ b/apps/logging/loki/application.yaml
@@ -28,3 +28,8 @@ spec:
       - CreateNamespace=true
       - ServerSideApply=true
       - SkipDryRunOnMissingResource=true
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
+        pod-security.kubernetes.io/audit: privileged
+        pod-security.kubernetes.io/warn: privileged