diff --git a/config/install.yaml b/config/install.yaml
index 361635d2..b5b09dc9 100644
--- a/config/install.yaml
+++ b/config/install.yaml
@@ -1614,6 +1614,10 @@ webhooks:
       path: /pods
   failurePolicy: Fail
   name: pods.capsule.clastix.io
+  namespaceSelector:
+    matchExpressions:
+    - key: capsule.clastix.io/tenant
+      operator: Exists
   rules:
   - apiGroups:
     - ""
diff --git a/config/webhook/patch_ns_selector.yaml b/config/webhook/patch_ns_selector.yaml
index eacfd011..523f7a0d 100644
--- a/config/webhook/patch_ns_selector.yaml
+++ b/config/webhook/patch_ns_selector.yaml
@@ -22,6 +22,12 @@
     matchExpressions:
       - key: capsule.clastix.io/tenant
         operator: Exists
+- op: add
+  path: /webhooks/5/namespaceSelector
+  value:
+    matchExpressions:
+      - key: capsule.clastix.io/tenant
+        operator: Exists
 - op: add
   path: /webhooks/6/namespaceSelector
   value: