diff --git a/modules/bootkube/resources/manifests/02-ingress-namespace.yaml b/modules/bootkube/resources/manifests/02-ingress-namespace.yaml
new file mode 100644
index 0000000000..3adc00bf11
--- /dev/null
+++ b/modules/bootkube/resources/manifests/02-ingress-namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: tectonic-ingress # Create the namespace first.
+  labels: # network policy can only select by labels
+    name: tectonic-ingress