diff --git a/charts/kubezero-cert-manager/Chart.yaml b/charts/kubezero-cert-manager/Chart.yaml
index 09e2842b..6fe01b3d 100644
--- a/charts/kubezero-cert-manager/Chart.yaml
+++ b/charts/kubezero-cert-manager/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-cert-manager
 description: KubeZero Umbrella Chart for cert-manager
 type: application
-version: 0.3.2
+version: 0.3.3
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/logo_small.png
 keywords:
@@ -11,6 +11,9 @@ keywords:
 maintainers:
   - name: Quarky9
 dependencies:
+  - name: kubezero-lib
+    version: ">= 0.1.1"
+    repository: https://zero-down-time.github.io/kubezero/
   - name: cert-manager
     version: 0.15.0
     repository: https://charts.jetstack.io
diff --git a/charts/kubezero-cert-manager/templates/cluster-ca.yaml b/charts/kubezero-cert-manager/templates/cluster-ca.yaml
index 7ac96650..f5f70b0f 100644
--- a/charts/kubezero-cert-manager/templates/cluster-ca.yaml
+++ b/charts/kubezero-cert-manager/templates/cluster-ca.yaml
@@ -7,6 +7,8 @@ kind: Issuer
 metadata:
   name: kubezero-selfsigning-issuer
   namespace: kube-system
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   selfSigned: {}
 ---
@@ -15,6 +17,8 @@ kind: Certificate
 metadata:
   name: kubezero-local-ca
   namespace: kube-system
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   secretName: kubezero-ca-tls
   commonName: "kubezero-local-ca"
@@ -31,6 +35,8 @@ kind: Secret
 metadata:
   name: kubezero-ca-tls
   namespace: kube-system
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 data:
   tls.crt: {{ .Values.localCA.ca.crt | b64enc }}
   tls.key: {{ .Values.localCA.ca.key | b64enc }}
@@ -42,6 +48,8 @@ kind: Issuer
 metadata:
   name: kubezero-local-ca-issuer
   namespace: kube-system
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   ca:
     secretName: kubezero-ca-tls
diff --git a/charts/kubezero-cert-manager/templates/cluster-issuer.yaml b/charts/kubezero-cert-manager/templates/cluster-issuer.yaml
index c84a0347..4861733c 100644
--- a/charts/kubezero-cert-manager/templates/cluster-issuer.yaml
+++ b/charts/kubezero-cert-manager/templates/cluster-issuer.yaml
@@ -3,6 +3,8 @@ apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: {{ .Values.clusterIssuer.name }}
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   acme:
     server: {{ .Values.clusterIssuer.server }}