diff --git a/certificate_manager_google_managed_certificate_dns/main.tf b/certificate_manager_google_managed_certificate_dns/main.tf
index 7ce5658c..94082fd1 100644
--- a/certificate_manager_google_managed_certificate_dns/main.tf
+++ b/certificate_manager_google_managed_certificate_dns/main.tf
@@ -2,6 +2,9 @@ resource "google_certificate_manager_certificate" "default" {
   name        = "dns-cert-${local.name_suffix}"
   description = "The default cert"
   scope       = "EDGE_CACHE"
+  labels = {
+    env = "test"
+  }
   managed {
     domains = [
       google_certificate_manager_dns_authorization.instance.domain,