diff --git a/clusters/cl01tl/services/spegel/templates/namespace.yaml b/clusters/cl01tl/services/spegel/templates/namespace.yaml
new file mode 100644
index 000000000..870a6b300
--- /dev/null
+++ b/clusters/cl01tl/services/spegel/templates/namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: spegel
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
diff --git a/clusters/cl01tl/services/spegel/values.yaml b/clusters/cl01tl/services/spegel/values.yaml
index 34b725ca6..9106d1efc 100644
--- a/clusters/cl01tl/services/spegel/values.yaml
+++ b/clusters/cl01tl/services/spegel/values.yaml
@@ -38,3 +38,4 @@ spegel:
       - https://registry.k8s.io
       - https://k8s.gcr.io
       - https://lscr.io
+  containerdRegistryConfigPath: /etc/cri/conf.d/hosts