diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-backendtlspolicies.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-backendtlspolicies.gateway.networking.k8s.io.yaml
index 7b3e555cf..dc9d7f779 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-backendtlspolicies.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-backendtlspolicies.gateway.networking.k8s.io.yaml
@@ -3,9 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
   labels:
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/policy: Direct
   name: backendtlspolicies.gateway.networking.k8s.io
 spec:
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gatewayclasses.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gatewayclasses.gateway.networking.k8s.io.yaml
index 15b3e4e07..ced82f020 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gatewayclasses.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gatewayclasses.gateway.networking.k8s.io.yaml
@@ -3,8 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: gatewayclasses.gateway.networking.k8s.io
 spec:
   group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gateways.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gateways.gateway.networking.k8s.io.yaml
index cf4bc8ef1..a353e70b6 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gateways.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-gateways.gateway.networking.k8s.io.yaml
@@ -3,8 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: gateways.gateway.networking.k8s.io
 spec:
   group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-grpcroutes.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-grpcroutes.gateway.networking.k8s.io.yaml
index 28bf658d6..0c37635a0 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-grpcroutes.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-grpcroutes.gateway.networking.k8s.io.yaml
@@ -3,8 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: grpcroutes.gateway.networking.k8s.io
 spec:
   group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-httproutes.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-httproutes.gateway.networking.k8s.io.yaml
index 2df101bdf..d6f79db35 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-httproutes.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-httproutes.gateway.networking.k8s.io.yaml
@@ -3,8 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: httproutes.gateway.networking.k8s.io
 spec:
   group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutes.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutes.traefik.io.yaml
index 92c6950e0..3b0a3a26e 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutes.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutes.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: ingressroutes.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutetcps.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutetcps.traefik.io.yaml
index 9d21e4c88..a78e32d9b 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutetcps.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressroutetcps.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: ingressroutetcps.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressrouteudps.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressrouteudps.traefik.io.yaml
index 456918d03..7acd3fb84 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressrouteudps.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-ingressrouteudps.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: ingressrouteudps.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewares.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewares.traefik.io.yaml
index 6fa636d69..34f6acee0 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewares.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewares.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: middlewares.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewaretcps.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewaretcps.traefik.io.yaml
index 57e19b691..0ce49b37f 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewaretcps.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-middlewaretcps.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: middlewaretcps.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-referencegrants.gateway.networking.k8s.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-referencegrants.gateway.networking.k8s.io.yaml
index 9f56fbdb3..8bd4ff4f5 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-referencegrants.gateway.networking.k8s.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-referencegrants.gateway.networking.k8s.io.yaml
@@ -3,8 +3,12 @@ kind: CustomResourceDefinition
 metadata:
   annotations:
     api-approved.kubernetes.io: https://github.com/kubernetes-sigs/gateway-api/pull/3328
+    app.kubernetes.io/managed-by: Helm
     gateway.networking.k8s.io/bundle-version: v1.4.0
     gateway.networking.k8s.io/channel: standard
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: referencegrants.gateway.networking.k8s.io
 spec:
   group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransports.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransports.traefik.io.yaml
index 4ab497b8c..295578485 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransports.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransports.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: serverstransports.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransporttcps.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransporttcps.traefik.io.yaml
index 23dd27b68..a7e4e2c77 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransporttcps.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-serverstransporttcps.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: serverstransporttcps.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsoptions.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsoptions.traefik.io.yaml
index 404565577..26dbdfabb 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsoptions.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsoptions.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: tlsoptions.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsstores.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsstores.traefik.io.yaml
index d2d165cdb..39406fcc4 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsstores.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-tlsstores.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: tlsstores.traefik.io
 spec:
   group: traefik.io
diff --git a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-traefikservices.traefik.io.yaml b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-traefikservices.traefik.io.yaml
index 1aa75f95e..7854c4e22 100644
--- a/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-traefikservices.traefik.io.yaml
+++ b/clusters/cl01tl/manifests/traefik/CustomResourceDefinition-traefikservices.traefik.io.yaml
@@ -2,7 +2,11 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
+    app.kubernetes.io/managed-by: Helm
     controller-gen.kubebuilder.io/version: v0.16.1
+    helm.sh/resource-policy: keep
+  labels:
+    app.kubernetes.io/managed-by: Helm
   name: traefikservices.traefik.io
 spec:
   group: traefik.io