diff --git a/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_binding_controller.go b/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_binding_controller.go
index 0997c08c..f1ec4dcb 100644
--- a/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_binding_controller.go
+++ b/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_binding_controller.go
@@ -187,6 +187,11 @@ func (s *clusterRoleBindingClient) ObjectClient() *objectclient.ObjectClient {
 }
 
 func (s *clusterRoleBindingClient) Create(o *v1.ClusterRoleBinding) (*v1.ClusterRoleBinding, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Create(o)
 	return obj.(*v1.ClusterRoleBinding), err
 }
@@ -202,6 +207,11 @@ func (s *clusterRoleBindingClient) GetNamespaced(namespace, name string, opts me
 }
 
 func (s *clusterRoleBindingClient) Update(o *v1.ClusterRoleBinding) (*v1.ClusterRoleBinding, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Update(o.Name, o)
 	return obj.(*v1.ClusterRoleBinding), err
 }
diff --git a/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_controller.go b/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_controller.go
index f83da810..0763c6d6 100644
--- a/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_controller.go
+++ b/apis/rbac.authorization.k8s.io/v1/zz_generated_cluster_role_controller.go
@@ -187,6 +187,11 @@ func (s *clusterRoleClient) ObjectClient() *objectclient.ObjectClient {
 }
 
 func (s *clusterRoleClient) Create(o *v1.ClusterRole) (*v1.ClusterRole, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Create(o)
 	return obj.(*v1.ClusterRole), err
 }
@@ -202,6 +207,11 @@ func (s *clusterRoleClient) GetNamespaced(namespace, name string, opts metav1.Ge
 }
 
 func (s *clusterRoleClient) Update(o *v1.ClusterRole) (*v1.ClusterRole, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Update(o.Name, o)
 	return obj.(*v1.ClusterRole), err
 }
diff --git a/apis/rbac.authorization.k8s.io/v1/zz_generated_role_binding_controller.go b/apis/rbac.authorization.k8s.io/v1/zz_generated_role_binding_controller.go
index 24bcbe2e..c735bf17 100644
--- a/apis/rbac.authorization.k8s.io/v1/zz_generated_role_binding_controller.go
+++ b/apis/rbac.authorization.k8s.io/v1/zz_generated_role_binding_controller.go
@@ -188,6 +188,11 @@ func (s *roleBindingClient) ObjectClient() *objectclient.ObjectClient {
 }
 
 func (s *roleBindingClient) Create(o *v1.RoleBinding) (*v1.RoleBinding, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Create(o)
 	return obj.(*v1.RoleBinding), err
 }
@@ -203,6 +208,11 @@ func (s *roleBindingClient) GetNamespaced(namespace, name string, opts metav1.Ge
 }
 
 func (s *roleBindingClient) Update(o *v1.RoleBinding) (*v1.RoleBinding, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Update(o.Name, o)
 	return obj.(*v1.RoleBinding), err
 }
diff --git a/apis/rbac.authorization.k8s.io/v1/zz_generated_role_controller.go b/apis/rbac.authorization.k8s.io/v1/zz_generated_role_controller.go
index 3cdb6c96..a8e300dd 100644
--- a/apis/rbac.authorization.k8s.io/v1/zz_generated_role_controller.go
+++ b/apis/rbac.authorization.k8s.io/v1/zz_generated_role_controller.go
@@ -188,6 +188,11 @@ func (s *roleClient) ObjectClient() *objectclient.ObjectClient {
 }
 
 func (s *roleClient) Create(o *v1.Role) (*v1.Role, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Create(o)
 	return obj.(*v1.Role), err
 }
@@ -203,6 +208,11 @@ func (s *roleClient) GetNamespaced(namespace, name string, opts metav1.GetOption
 }
 
 func (s *roleClient) Update(o *v1.Role) (*v1.Role, error) {
+	if o.Labels == nil {
+		labels := make(map[string]string)
+		o.Labels = labels
+	}
+	o.Labels["creator.cattle.io/rancher-created"] = "true"
 	obj, err := s.objectClient.Update(o.Name, o)
 	return obj.(*v1.Role), err
 }