diff --git a/apps/premises/d8-ugmk-prod/kustomization.yaml b/apps/premises/d8-ugmk-prod/kustomization.yaml
index 9ffa6d0..be3f8da 100644
--- a/apps/premises/d8-ugmk-prod/kustomization.yaml
+++ b/apps/premises/d8-ugmk-prod/kustomization.yaml
@@ -4,6 +4,10 @@ resources:
   - ../base
   - kafka-ca-configmap.yaml
 patches:
+  - path: namespace.yaml
+    target:
+      kind: Namespace
+      name: premises
   - path: backend.yaml
     target:
       kind: HelmRelease
diff --git a/apps/premises/d8-ugmk-prod/namespace.yaml b/apps/premises/d8-ugmk-prod/namespace.yaml
new file mode 100644
index 0000000..3b699f7
--- /dev/null
+++ b/apps/premises/d8-ugmk-prod/namespace.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: premises
+  labels:
+    istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged