diff --git a/api/konfig/builtinpluginconsts/namespace.go b/api/konfig/builtinpluginconsts/namespace.go
index 43a54a047..593652dab 100644
--- a/api/konfig/builtinpluginconsts/namespace.go
+++ b/api/konfig/builtinpluginconsts/namespace.go
@@ -12,5 +12,9 @@ namespace:
   kind: RoleBinding
 - path: subjects
   kind: ClusterRoleBinding
+- path: spec/service/namespace
+  group: apiregistration.k8s.io
+  kind: APIService
+  create: true
 `
 )