diff --git a/deploy/kubernetes/deployment.yaml b/deploy/kubernetes/deployment.yaml
index ed54277f6..a5e5107cc 100644
--- a/deploy/kubernetes/deployment.yaml
+++ b/deploy/kubernetes/deployment.yaml
@@ -6,6 +6,8 @@ kind: Deployment
 apiVersion: apps/v1
 metadata:
   name: csi-resizer
+  labels:
+    app: csi-resizer
 spec:
   replicas: 1
   selector:
diff --git a/deploy/kubernetes/rbac.yaml b/deploy/kubernetes/rbac.yaml
index 413a54911..961924c4d 100644
--- a/deploy/kubernetes/rbac.yaml
+++ b/deploy/kubernetes/rbac.yaml
@@ -14,6 +14,8 @@ metadata:
   name: csi-resizer
   # replace with non-default namespace name
   namespace: default
+  labels:
+    app: csi-resizer
 
 ---
 # Resizer must be able to work with PVCs, PVs, SCs.
@@ -21,6 +23,8 @@ kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: external-resizer-runner
+  labels:
+    app: csi-resizer
 rules:
   # The following rule should be uncommented for plugins that require secrets
   # for provisioning.
@@ -48,6 +52,8 @@ kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: csi-resizer-role
+  labels:
+    app: csi-resizer
 subjects:
   - kind: ServiceAccount
     name: csi-resizer
@@ -67,6 +73,8 @@ metadata:
   # replace with non-default namespace name
   namespace: default
   name: external-resizer-cfg
+  labels:
+    app: csi-resizer
 rules:
 - apiGroups: ["coordination.k8s.io"]
   resources: ["leases"]