diff --git a/deploy/main.jsonnet b/deploy/main.jsonnet
index 5135cdb5d..7d6538f4b 100644
--- a/deploy/main.jsonnet
+++ b/deploy/main.jsonnet
@@ -4,7 +4,7 @@ function(version='v0.0.1-alpha.3')
     kind: 'Namespace',
     metadata: {
       name: 'parca',
-      annotations: {
+      labels: {
         'pod-security.kubernetes.io/enforce': 'privileged',
         'pod-security.kubernetes.io/audit': 'privileged',
         'pod-security.kubernetes.io/warn': 'privileged',
diff --git a/deploy/openshift.jsonnet b/deploy/openshift.jsonnet
index 44f906d74..4d7f9dfb7 100644
--- a/deploy/openshift.jsonnet
+++ b/deploy/openshift.jsonnet
@@ -4,7 +4,7 @@ function(version='v0.0.1-alpha.3')
     kind: 'Namespace',
     metadata: {
       name: 'parca',
-      annotations: {
+      labels: {
         'pod-security.kubernetes.io/enforce': 'privileged',
         'pod-security.kubernetes.io/audit': 'privileged',
         'pod-security.kubernetes.io/warn': 'privileged',