diff --git a/deploy/kubernetes/deployment.yaml b/deploy/kubernetes/deployment.yaml
index 77a10348f0..c2a825ab9e 100644
--- a/deploy/kubernetes/deployment.yaml
+++ b/deploy/kubernetes/deployment.yaml
@@ -6,6 +6,8 @@ kind: Deployment
 apiVersion: apps/v1
 metadata:
   name: csi-provisioner
+  labels:
+    app: csi-provisioner
 spec:
   replicas: 3
   selector:
diff --git a/deploy/kubernetes/rbac.yaml b/deploy/kubernetes/rbac.yaml
index 92fa4920b8..c0549c9e03 100644
--- a/deploy/kubernetes/rbac.yaml
+++ b/deploy/kubernetes/rbac.yaml
@@ -14,12 +14,16 @@ metadata:
   name: csi-provisioner
   # replace with non-default namespace name
   namespace: default
+  labels:
+    app: csi-provisioner
 
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: external-provisioner-runner
+  labels:
+    app: csi-provisioner
 rules:
   # The following rule should be uncommented for plugins that require secrets
   # for provisioning.
@@ -63,6 +67,8 @@ kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: csi-provisioner-role
+  labels:
+    app: csi-provisioner
 subjects:
   - kind: ServiceAccount
     name: csi-provisioner
@@ -82,6 +88,8 @@ metadata:
   # replace with non-default namespace name
   namespace: default
   name: external-provisioner-cfg
+  labels:
+    app: csi-provisioner
 rules:
 # Only one of the following rules for endpoints or leases is required based on
 # what is set for `--leader-election-type`. Endpoints are deprecated in favor of Leases.
@@ -114,6 +122,8 @@ metadata:
   name: csi-provisioner-role-cfg
   # replace with non-default namespace name
   namespace: default
+  labels:
+    app: csi-provisioner
 subjects:
   - kind: ServiceAccount
     name: csi-provisioner
diff --git a/deploy/kubernetes/storage-capacity.yaml b/deploy/kubernetes/storage-capacity.yaml
index 8161eb17d3..94af7ae1ec 100644
--- a/deploy/kubernetes/storage-capacity.yaml
+++ b/deploy/kubernetes/storage-capacity.yaml
@@ -9,6 +9,8 @@ kind: Deployment
 apiVersion: apps/v1
 metadata:
   name: csi-provisioner
+  labels:
+    app: csi-provisioner
 spec:
   replicas: 3
   selector: