diff --git a/README.md b/README.md
index 8f70230..fd3e489 100644
--- a/README.md
+++ b/README.md
@@ -62,7 +62,7 @@ The Synology CSI driver supports:
         - Create a **default** storage class named "`synology-iscsi-storage`" that uses the "`Retain`" policy.
         - Create a volume snapshot class named "`synology-snapshotclass`" that uses the "`Delete`" policy. (*Full* deployment only)
     * **HELM** (Local Development)
-        1. `kubectl create ns synology-csi`
+        1. `kubectl create ns synology-csi; kubectl label ns synology-csi pod-security.kubernetes.io/enforce=privileged --overwrite`
         2. `kubectl create secret -n synology-csi generic client-info-secret --from-file=./config/client-info.yml`
         3. `cd deploy/helm; make up`
 
diff --git a/deploy/kubernetes/v1.20/namespace.yml b/deploy/kubernetes/v1.20/namespace.yml
index 57dda22..3ebb718 100644
--- a/deploy/kubernetes/v1.20/namespace.yml
+++ b/deploy/kubernetes/v1.20/namespace.yml
@@ -1,4 +1,6 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: synology-csi
\ No newline at end of file
+  name: synology-csi
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 613db35..f246e4c 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -20,7 +20,7 @@ csi_install(){
     parse_version
     echo "Deploy Version: $deploy_k8s_version"
 
-    kubectl create ns synology-csi
+    kubectl apply -f "$SOURCE_PATH"/deploy/kubernetes/$deploy_k8s_version/namespace.yml
     kubectl create secret -n synology-csi generic client-info-secret --from-file="$config_file"
 
     if [ ! -d "$plugin_dir" ]; then