diff --git a/terraform/bootstrap-namespaces.tf b/terraform/bootstrap-namespaces.tf
index 53b4cc5..e6359b4 100644
--- a/terraform/bootstrap-namespaces.tf
+++ b/terraform/bootstrap-namespaces.tf
@@ -2,7 +2,7 @@ locals {
   namespaces = {
     "cert-manager"          = {}
     "reloader"              = {}
-    "ingress-nginx"         = {}
+    "ingress-nginx"         = { pod_security = "restricted" }
     "ddb"                   = {}
     "iam"                   = {}
     "storage"               = {}
@@ -26,7 +26,7 @@ resource "kubernetes_namespace" "namespaces" {
   metadata {
     name = each.key
     labels = {
-      "pod-security.kubernetes.io/enforce"         = "baseline"
+      "pod-security.kubernetes.io/enforce"         = try(each.value.pod_security, "baseline")
       "pod-security.kubernetes.io/enforce-version" = "latest"
       "pod-security.kubernetes.io/audit"           = "restricted"
       "pod-security.kubernetes.io/audit-version"   = "latest"