diff --git a/modules/kubernetes/kms/main.tf b/modules/kubernetes/kms/main.tf
index 402c76a8..fa7f40a9 100644
--- a/modules/kubernetes/kms/main.tf
+++ b/modules/kubernetes/kms/main.tf
@@ -3,6 +3,9 @@ variable "tls_secret_name" {}
 resource "kubernetes_namespace" "kms" {
   metadata {
     name = "kms"
+    labels = {
+      "istio-injection" : "enabled"
+    }
   }
 }