diff --git a/datadome-istio/templates/destinationrule.yaml b/datadome-istio/templates/destinationrule.yaml
index b3ffa29..691e996 100644
--- a/datadome-istio/templates/destinationrule.yaml
+++ b/datadome-istio/templates/destinationrule.yaml
@@ -5,6 +5,10 @@ kind: DestinationRule
 metadata:
   name: {{ .Release.Name }}
   namespace: istio-system
+  {{- if .Values.istio.resourceValidation.enabled }}
+  labels:
+    istio.io/tag: stable
+  {{- end }}
 spec:
   host: {{ .Values.datadome.api_url }}
   trafficPolicy:
diff --git a/datadome-istio/templates/envoyfilter.yaml b/datadome-istio/templates/envoyfilter.yaml
index 05ab1f9..2d34683 100644
--- a/datadome-istio/templates/envoyfilter.yaml
+++ b/datadome-istio/templates/envoyfilter.yaml
@@ -4,6 +4,10 @@ kind: EnvoyFilter
 metadata:
   name: {{ .Release.Name }}
   namespace: istio-system
+  {{- if .Values.istio.resourceValidation.enabled }}
+  labels:
+      istio.io/tag: stable
+  {{- end }}
 spec:
   workloadSelector:
     labels:
diff --git a/datadome-istio/templates/serviceentry.yaml b/datadome-istio/templates/serviceentry.yaml
index 846c89c..160ed5f 100644
--- a/datadome-istio/templates/serviceentry.yaml
+++ b/datadome-istio/templates/serviceentry.yaml
@@ -5,6 +5,10 @@ kind: ServiceEntry
 metadata:
   name: {{ .Release.Name }}
   namespace: istio-system
+  {{- if .Values.istio.resourceValidation.enabled }}
+  labels:
+      istio.io/tag: stable
+  {{- end }}
 spec:
   hosts:
   - {{ .Values.datadome.api_url }}
diff --git a/datadome-istio/values.yaml b/datadome-istio/values.yaml
index cc70369..5f43cbb 100644
--- a/datadome-istio/values.yaml
+++ b/datadome-istio/values.yaml
@@ -13,9 +13,12 @@ istio:
   workloadSelector:
     labels:
       datadome: "enabled"
+  resourceValidation:
+      enabled: false
 
 datadome:
   api_key: TOP_SECRET_API_KEY
   api_url: api.datadome.co
   api_timeout: 200 # in milliseconds
   api_connection_timeout: "100ms" # go time format
+