diff --git a/charts/controlplane/templates/authz/deployment.yaml b/charts/controlplane/templates/authz/deployment.yaml
index 2513af68..d93e44a6 100644
--- a/charts/controlplane/templates/authz/deployment.yaml
+++ b/charts/controlplane/templates/authz/deployment.yaml
@@ -27,6 +27,7 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
       labels:
+        platform.union.ai/zone: "controlplane"
         {{- include "union.authz.selectorLabels" . | nindent 8 }}
     spec:
       {{- with .Values.imagePullSecrets }}
diff --git a/charts/controlplane/templates/cacheservice/deployment.yaml b/charts/controlplane/templates/cacheservice/deployment.yaml
index 19b62152..59479014 100644
--- a/charts/controlplane/templates/cacheservice/deployment.yaml
+++ b/charts/controlplane/templates/cacheservice/deployment.yaml
@@ -19,7 +19,9 @@ spec:
         {{- with .Values.podAnnotations }}
         {{- toYaml . | nindent 8 }}
         {{- end }}
-      labels: {{ include "cacheservice.podLabels" . | nindent 8 }}
+      labels:
+        platform.union.ai/zone: "controlplane"
+        {{ include "cacheservice.podLabels" . | nindent 8 }}
     spec:
       {{- with .Values.flyte.cacheservice.securityContext }}
       securityContext: {{ tpl (toYaml .) $ | nindent 8 }}
diff --git a/charts/controlplane/templates/console/deployment.yaml b/charts/controlplane/templates/console/deployment.yaml
index af28b728..e086aea7 100644
--- a/charts/controlplane/templates/console/deployment.yaml
+++ b/charts/controlplane/templates/console/deployment.yaml
@@ -27,6 +27,7 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
       labels:
+        platform.union.ai/zone: "controlplane"
         {{- include "console.selectorLabels" . | nindent 8 }}
         {{- with .Values.console.podLabels }}
         {{- tpl (toYaml .) $ | nindent 8 }}
diff --git a/charts/dataplane/templates/clusterresourcesync/deployment.yaml b/charts/dataplane/templates/clusterresourcesync/deployment.yaml
index a2cb6718..48d8f09d 100644
--- a/charts/dataplane/templates/clusterresourcesync/deployment.yaml
+++ b/charts/dataplane/templates/clusterresourcesync/deployment.yaml
@@ -20,6 +20,7 @@ spec:
         {{- end }}
         {{- include "global.podAnnotations" . | nindent 8 }}
       labels:
+        platform.union.ai/zone: "dataplane"
         {{- include "clusterresourcesync.podLabels" . | nindent 8 }}
     spec:
       containers:
diff --git a/charts/dataplane/templates/flyteconnector/deployment.yaml b/charts/dataplane/templates/flyteconnector/deployment.yaml
index 2e39a5f9..bf5e82e0 100644
--- a/charts/dataplane/templates/flyteconnector/deployment.yaml
+++ b/charts/dataplane/templates/flyteconnector/deployment.yaml
@@ -15,7 +15,9 @@ spec:
         {{- with .Values.flyteconnector.podAnnotations }}
           {{- toYaml . | nindent 8 }}
           {{- end }}
-      labels: {{ include "flyteconnector.labels" . | nindent 8 }}
+      labels:
+        platform.union.ai/zone: "dataplane"
+        {{ include "flyteconnector.labels" . | nindent 8 }}
     spec:
       {{- if .Values.flyteconnector.priorityClassName }}
       priorityClassName: {{ .Values.flyteconnector.priorityClassName }}
diff --git a/charts/dataplane/templates/imagebuilder/deployment.yaml b/charts/dataplane/templates/imagebuilder/deployment.yaml
index cdee1452..e6334e33 100644
--- a/charts/dataplane/templates/imagebuilder/deployment.yaml
+++ b/charts/dataplane/templates/imagebuilder/deployment.yaml
@@ -26,6 +26,7 @@ spec:
         {{- end }}
       {{- end }}
       labels:
+        platform.union.ai/zone: "dataplane"
         {{- include "imagebuilder.buildkit.selectorLabels" . | nindent 8 }}
     spec:
       serviceAccountName: {{ .Values.imageBuilder.buildkit.serviceAccount.name | default "union-imagebuilder" | quote }}
diff --git a/charts/dataplane/templates/nodeexecutor/deployment.yaml b/charts/dataplane/templates/nodeexecutor/deployment.yaml
index 4e05d4a1..ee547928 100644
--- a/charts/dataplane/templates/nodeexecutor/deployment.yaml
+++ b/charts/dataplane/templates/nodeexecutor/deployment.yaml
@@ -20,6 +20,7 @@ spec:
         {{- end }}
         {{- include "global.podAnnotations" . | nindent 8 }}
       labels:
+        platform.union.ai/zone: "dataplane"
         {{- include "executor.podLabels" . | nindent 8 }}
     spec:
       securityContext:
diff --git a/charts/dataplane/templates/nodeobserver/daemonset.yaml b/charts/dataplane/templates/nodeobserver/daemonset.yaml
index 4d711ac4..668d427c 100644
--- a/charts/dataplane/templates/nodeobserver/daemonset.yaml
+++ b/charts/dataplane/templates/nodeobserver/daemonset.yaml
@@ -19,6 +19,7 @@ spec:
         {{- end }}
         {{- include "global.podAnnotations" . | nindent 8 }}
       labels:
+        platform.union.ai/zone: "dataplane"
         {{ include "nodeobserver.podLabels" . | nindent 8 }}
     spec:
       priorityClassName: {{ .Values.operator.priorityClassName }}
diff --git a/charts/dataplane/templates/operator/configmap.yaml b/charts/dataplane/templates/operator/configmap.yaml
index 6ed3a24e..a124af61 100644
--- a/charts/dataplane/templates/operator/configmap.yaml
+++ b/charts/dataplane/templates/operator/configmap.yaml
@@ -69,6 +69,10 @@ data:
       org:
         {{- tpl (toYaml .) $ | nindent 8 }}
     {{- end }}
+    {{- with .Values.config.operator.secretsWatcher }}
+      secretsWatcher:
+        {{- tpl (toYaml .) $ | nindent 8 }}
+    {{- end }}
     {{- if and (not .Values.config.operator.org) .Values.namespace_mapping }}
       org:
         namespaceTemplate: {{ tpl (.Values.namespace_mapping.template | quote) $ }}
diff --git a/charts/dataplane/templates/operator/serviceaccount.yaml b/charts/dataplane/templates/operator/serviceaccount.yaml
index e4887bb8..a439b4ee 100644
--- a/charts/dataplane/templates/operator/serviceaccount.yaml
+++ b/charts/dataplane/templates/operator/serviceaccount.yaml
@@ -154,6 +154,19 @@ rules:
       - update
       - delete
   {{- end }}
+  {{- if .Values.config.operator.secretsWatcher.enabled }}
+  - apiGroups:
+      - apps
+    resources:
+      - replicasets
+      - deployments
+    verbs:
+      - get
+      - list
+      - watch
+      - update
+      - patch
+  {{- end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/charts/dataplane/templates/propeller/deployment-webhook.yaml b/charts/dataplane/templates/propeller/deployment-webhook.yaml
index 966a1e2f..20509e2f 100644
--- a/charts/dataplane/templates/propeller/deployment-webhook.yaml
+++ b/charts/dataplane/templates/propeller/deployment-webhook.yaml
@@ -23,6 +23,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         {{- include "flytepropellerwebhook.podLabels" . | nindent 8 }}
       annotations:
         configChecksum: {{ include (print .Template.BasePath "/propeller/configmap.yaml") . | sha256sum | trunc 63 | quote }}
diff --git a/charts/dataplane/templates/propeller/deployment.yaml b/charts/dataplane/templates/propeller/deployment.yaml
index 16892c5c..8bf5f559 100644
--- a/charts/dataplane/templates/propeller/deployment.yaml
+++ b/charts/dataplane/templates/propeller/deployment.yaml
@@ -20,6 +20,7 @@ spec:
         {{- end }}
         {{- include "global.podAnnotations" . | nindent 8 }}
       labels:
+        platform.union.ai/zone: "dataplane"
         {{ include "flytepropeller.podLabels" . | nindent 8 }}
     spec:
       {{- with .Values.flytepropeller.securityContext }}
diff --git a/charts/dataplane/values.yaml b/charts/dataplane/values.yaml
index c2c75e16..04276a0d 100644
--- a/charts/dataplane/values.yaml
+++ b/charts/dataplane/values.yaml
@@ -497,6 +497,12 @@ config:
       # -- Define the prometheus health check endpoint.
       prometheus:
         endpoint: '{{ include "prometheus.health.url" . }}'
+    # -- Configuration for the secrets watcher, which triggers rolling restarts when secrets change.
+    secretsWatcher:
+      # -- Enable the secrets watcher.
+      enabled: false
+      # -- Log changes but do not update deployments.
+      dryRun: true
   # -- Configuration for the operator proxy service.
   proxy:
     # -- Secret manager configuration
diff --git a/tests/generated/controlplane.aws.billing-enable.yaml b/tests/generated/controlplane.aws.billing-enable.yaml
index 4baab42c..eac8283e 100644
--- a/tests/generated/controlplane.aws.billing-enable.yaml
+++ b/tests/generated/controlplane.aws.billing-enable.yaml
@@ -6338,7 +6338,9 @@ spec:
         linkerd.io/inject: disabled
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
-      labels: 
+      labels:
+        platform.union.ai/zone: "controlplane"
+        
         app.kubernetes.io/name: cacheservice
         app.kubernetes.io/instance: release-name
         helm.sh/chart: controlplane-2026.4.1
@@ -6456,6 +6458,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
       labels:
+        platform.union.ai/zone: "controlplane"
         app.kubernetes.io/name: unionconsole
         app.kubernetes.io/instance: release-name
     spec:
diff --git a/tests/generated/controlplane.aws.yaml b/tests/generated/controlplane.aws.yaml
index 20595210..25eb0f5c 100644
--- a/tests/generated/controlplane.aws.yaml
+++ b/tests/generated/controlplane.aws.yaml
@@ -6339,7 +6339,9 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
-      labels: 
+      labels:
+        platform.union.ai/zone: "controlplane"
+        
         app.kubernetes.io/name: cacheservice
         app.kubernetes.io/instance: release-name
         helm.sh/chart: controlplane-2026.4.1
@@ -6458,6 +6460,7 @@ spec:
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
       labels:
+        platform.union.ai/zone: "controlplane"
         app.kubernetes.io/name: unionconsole
         app.kubernetes.io/instance: release-name
     spec:
diff --git a/tests/generated/controlplane.external-authz.yaml b/tests/generated/controlplane.external-authz.yaml
index afa1a878..1fd47813 100644
--- a/tests/generated/controlplane.external-authz.yaml
+++ b/tests/generated/controlplane.external-authz.yaml
@@ -6343,7 +6343,9 @@ spec:
         linkerd.io/inject: disabled
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
-      labels: 
+      labels:
+        platform.union.ai/zone: "controlplane"
+        
         app.kubernetes.io/name: cacheservice
         app.kubernetes.io/instance: release-name
         helm.sh/chart: controlplane-2026.4.1
@@ -6461,6 +6463,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
       labels:
+        platform.union.ai/zone: "controlplane"
         app.kubernetes.io/name: unionconsole
         app.kubernetes.io/instance: release-name
     spec:
diff --git a/tests/generated/controlplane.userclouds.yaml b/tests/generated/controlplane.userclouds.yaml
index 6fddeaf2..9a50bd73 100644
--- a/tests/generated/controlplane.userclouds.yaml
+++ b/tests/generated/controlplane.userclouds.yaml
@@ -6338,7 +6338,9 @@ spec:
         linkerd.io/inject: disabled
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
-      labels: 
+      labels:
+        platform.union.ai/zone: "controlplane"
+        
         app.kubernetes.io/name: cacheservice
         app.kubernetes.io/instance: release-name
         helm.sh/chart: controlplane-2026.4.1
@@ -6456,6 +6458,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
       labels:
+        platform.union.ai/zone: "controlplane"
         app.kubernetes.io/name: unionconsole
         app.kubernetes.io/instance: release-name
     spec:
diff --git a/tests/generated/dataplane.additional-podlabels.yaml b/tests/generated/dataplane.additional-podlabels.yaml
index 0386b605..8e3db891 100644
--- a/tests/generated/dataplane.additional-podlabels.yaml
+++ b/tests/generated/dataplane.additional-podlabels.yaml
@@ -2747,6 +2747,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5239,6 +5242,7 @@ spec:
         configChecksum: "bef188a6ef20bf390a95e33b16ee869128e28243ae661609aab81d95191b1d3"
         prometheus.io/scrape: "true"
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         custom-label: custom-value
@@ -5342,6 +5346,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5459,6 +5464,7 @@ spec:
         configChecksum: "a1e4a396e83da22e5ffee35c34f73c3b54be6c6ba8bf8d81004e789023847e1"
         prometheus.io/scrape: "true"
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         custom-label: custom-value
@@ -5560,7 +5566,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "7be121e6bb634d408f8c583aea06ba12169fd6048e02dbda821b587e928f981"
+        configChecksum: "4076d001f4e350fc48c9eb224e0f71482e5fb912fa4fcbe49f7eb2ee4ac44c3"
         prometheus.io/scrape: "true"
       labels:
         
@@ -5699,7 +5705,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "7be121e6bb634d408f8c583aea06ba12169fd6048e02dbda821b587e928f981"
+        configChecksum: "4076d001f4e350fc48c9eb224e0f71482e5fb912fa4fcbe49f7eb2ee4ac44c3"
         prometheus.io/scrape: "true"
       labels:
         
@@ -5878,6 +5884,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         custom-label: custom-value
@@ -6044,6 +6051,7 @@ spec:
         configChecksum: "24e0f0c6dd0bf39ba1103d08dedaa1047108f9263429148d8f22e6025237ac3"
         prometheus.io/scrape: "true"
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         azure.workload.identity/use: "true"
diff --git a/tests/generated/dataplane.additional-templates.yaml b/tests/generated/dataplane.additional-templates.yaml
index 4339cba9..bbca4495 100644
--- a/tests/generated/dataplane.additional-templates.yaml
+++ b/tests/generated/dataplane.additional-templates.yaml
@@ -2782,6 +2782,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       org:
         namespaceTemplate: "{{ project }}-{{ domain }}"
       imageBuilder:
@@ -5298,6 +5301,7 @@ spec:
         configChecksum: "e8f0345934a4cc3c298aa5eef3ed39a162d412505166678ff0faf09c9d0afee"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5399,6 +5403,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5516,6 +5521,7 @@ spec:
         configChecksum: "8fb93781ca61cf36fec4151f853da41981c87a2295bc90caf045122030265e9"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5615,7 +5621,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "e79830c7e404c8378f84f6a9f8d8660aaa1b896b1c03001db047f655a9d9e59"
+        configChecksum: "5ee14e6faf5726ce2b854531f04ce7cec5e963a2bbda2b5271a0a8b7f2a5219"
         
       labels:
         
@@ -5752,7 +5758,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "e79830c7e404c8378f84f6a9f8d8660aaa1b896b1c03001db047f655a9d9e59"
+        configChecksum: "5ee14e6faf5726ce2b854531f04ce7cec5e963a2bbda2b5271a0a8b7f2a5219"
         
       labels:
         
@@ -5929,6 +5935,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6093,6 +6100,7 @@ spec:
         configChecksum: "54a4cba2f0b2935bab3d47d13782d2d7ea6d5fe154f434cf177d1a19dbf3dad"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.aws.eks-automode.yaml b/tests/generated/dataplane.aws.eks-automode.yaml
index 794bc5a2..3ea8f958 100644
--- a/tests/generated/dataplane.aws.eks-automode.yaml
+++ b/tests/generated/dataplane.aws.eks-automode.yaml
@@ -2932,6 +2932,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5793,6 +5796,7 @@ spec:
         configChecksum: "50c23f588ae08100ced2921cd3daeb4d70435c050a32bbc24751761fe7fe89e"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5894,6 +5898,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -6011,6 +6016,7 @@ spec:
         configChecksum: "19d5b93c874f9b21236bb2f5e2f27717fd6bbd6918af0867e806cc1044a9ced"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -6110,7 +6116,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "9ee03c454aa07ade77aa5c006c5e17d5b658167ea99806fdcf18f709993208b"
+        configChecksum: "a5ffc86bfe0989da8a70dae84d7c2e240cadb8f9fc98d22f1d6dee38415670f"
         
       labels:
         
@@ -6247,7 +6253,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "9ee03c454aa07ade77aa5c006c5e17d5b658167ea99806fdcf18f709993208b"
+        configChecksum: "a5ffc86bfe0989da8a70dae84d7c2e240cadb8f9fc98d22f1d6dee38415670f"
         
       labels:
         
@@ -6424,6 +6430,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6588,6 +6595,7 @@ spec:
         configChecksum: "6d56ed108e8a492245bac427b50799a1ec346824c1260acfae6306ea9ec1ce5"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.aws.with-ingress.yaml b/tests/generated/dataplane.aws.with-ingress.yaml
index 26217abb..0e7eda83 100644
--- a/tests/generated/dataplane.aws.with-ingress.yaml
+++ b/tests/generated/dataplane.aws.with-ingress.yaml
@@ -2759,6 +2759,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5251,6 +5254,7 @@ spec:
         configChecksum: "8b8cf98723ebace833b6b652bcb56bba6be768a8bc199ed5c1e2b7c0ea97e86"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5352,6 +5356,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5469,6 +5474,7 @@ spec:
         configChecksum: "ccc125c725a6f943c9c1d07ac09b644fd70df133dc169446431878603c5ac76"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5568,7 +5574,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "eec351aa015d7538c5eb70f8a39d31471f6b7aad96ee73b73a2cecd0b086344"
+        configChecksum: "12ef062dcf32a3ad1014f5e1e803e2672bd3a1c636ae04bb803571712ec200f"
         
       labels:
         
@@ -5705,7 +5711,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "eec351aa015d7538c5eb70f8a39d31471f6b7aad96ee73b73a2cecd0b086344"
+        configChecksum: "12ef062dcf32a3ad1014f5e1e803e2672bd3a1c636ae04bb803571712ec200f"
         
       labels:
         
@@ -5882,6 +5888,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6046,6 +6053,7 @@ spec:
         configChecksum: "d883634d70922473a7c6b721668e7a46bbd8bcab808203581628e616d007390"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.aws.yaml b/tests/generated/dataplane.aws.yaml
index c1ea9b5e..d4b07d25 100644
--- a/tests/generated/dataplane.aws.yaml
+++ b/tests/generated/dataplane.aws.yaml
@@ -2887,6 +2887,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       org:
         namespaceTemplate: "{{ project }}-{{ domain }}"
       imageBuilder:
@@ -5729,6 +5732,7 @@ spec:
         configChecksum: "c4724efa4c7236a0f6d5b124721f726008c901cf543e57636813146b2119713"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5830,6 +5834,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5947,6 +5952,7 @@ spec:
         configChecksum: "80028a87d6450e2f927cf0995d0e9dccd3df17b1ccd1dbb085e52947baeec82"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -6046,7 +6052,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "9cf84412a13c4e29123aefb4e9666f91f5f549d6ea30155c431c3a97cbadc09"
+        configChecksum: "f62821d85fbda1c246ee1291b8106d9f51b7b33b6b890d707fc2ca31b84350e"
         
       labels:
         
@@ -6183,7 +6189,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "9cf84412a13c4e29123aefb4e9666f91f5f549d6ea30155c431c3a97cbadc09"
+        configChecksum: "f62821d85fbda1c246ee1291b8106d9f51b7b33b6b890d707fc2ca31b84350e"
         
       labels:
         
@@ -6360,6 +6366,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6524,6 +6531,7 @@ spec:
         configChecksum: "045ec67f3450b2e8ed72becbc5587d9a49b6ea4a7e6d905e089999a096eec0d"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.azure-custom-storage-prefix.yaml b/tests/generated/dataplane.azure-custom-storage-prefix.yaml
index 1fe01a98..0ef50514 100644
--- a/tests/generated/dataplane.azure-custom-storage-prefix.yaml
+++ b/tests/generated/dataplane.azure-custom-storage-prefix.yaml
@@ -2798,6 +2798,9 @@ data:
           endpoint: 'http://union-operator-proxy:10254'
       org:
         namespaceTemplate: '{{ domain }}'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5346,6 +5349,7 @@ spec:
         configChecksum: "c13a554b9a39b142cd7fe140c69cc4a74b036b91594b6a122650fa05f1e1bce"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app.kubernetes.io/name: clusterresourcesync
@@ -5448,6 +5452,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5565,6 +5570,7 @@ spec:
         configChecksum: "e767f4bbc6e2c812d5e85c1626f16976591e906cd50a63d0a05936dc4bc6713"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app: executor
@@ -5665,7 +5671,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "6496ac1bb6180bb2eecfc6344617c47e3aafe94d387f5f80aa3c20f86ad1b58"
+        configChecksum: "e957bf97e34bc517eb848291a4518edd796c12a83ea838157152d802194bf58"
         
       labels:
         
@@ -5803,7 +5809,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "6496ac1bb6180bb2eecfc6344617c47e3aafe94d387f5f80aa3c20f86ad1b58"
+        configChecksum: "e957bf97e34bc517eb848291a4518edd796c12a83ea838157152d802194bf58"
         
       labels:
         
@@ -5981,6 +5987,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app.kubernetes.io/name: flyte-pod-webhook
@@ -6146,6 +6153,7 @@ spec:
         configChecksum: "933b7ca10215c494cba6ea2776ebc555d5ec87de998392bd86a452aa81abe90"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         azure.workload.identity/use: "true"
diff --git a/tests/generated/dataplane.azure.yaml b/tests/generated/dataplane.azure.yaml
index d0721fa6..74464d35 100644
--- a/tests/generated/dataplane.azure.yaml
+++ b/tests/generated/dataplane.azure.yaml
@@ -2800,6 +2800,9 @@ data:
           endpoint: 'http://union-operator-proxy:10254'
       org:
         namespaceTemplate: '{{ domain }}'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5348,6 +5351,7 @@ spec:
         configChecksum: "c13a554b9a39b142cd7fe140c69cc4a74b036b91594b6a122650fa05f1e1bce"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app.kubernetes.io/name: clusterresourcesync
@@ -5450,6 +5454,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5567,6 +5572,7 @@ spec:
         configChecksum: "50f47b0370129a5e8a53e23a80f621993e6d636aead636080486321b581b557"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app: executor
@@ -5667,7 +5673,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "71d33ac285ec0c76c334e4819f067ff238c61f42241a51b4607e5207e586972"
+        configChecksum: "2cef92ccb9dbbf62c406577ead9d8ceaca9f66f109e3f4d02bac5c41eda9373"
         
       labels:
         
@@ -5805,7 +5811,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "71d33ac285ec0c76c334e4819f067ff238c61f42241a51b4607e5207e586972"
+        configChecksum: "2cef92ccb9dbbf62c406577ead9d8ceaca9f66f109e3f4d02bac5c41eda9373"
         
       labels:
         
@@ -5983,6 +5989,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         azure.workload.identity/use: "true"
         app.kubernetes.io/name: flyte-pod-webhook
@@ -6148,6 +6155,7 @@ spec:
         configChecksum: "a8328980e66ca964e6d674436aa9bc7036a50c23d3322a6ea05b815388b72c0"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         azure.workload.identity/use: "true"
diff --git a/tests/generated/dataplane.cost.yaml b/tests/generated/dataplane.cost.yaml
index bd65a2d0..725db042 100644
--- a/tests/generated/dataplane.cost.yaml
+++ b/tests/generated/dataplane.cost.yaml
@@ -2726,6 +2726,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5003,6 +5006,7 @@ spec:
         configChecksum: "7ff0169854ce83fe5e5cb0ec550944a512e1ea0ebc47177b32a5bf3f7fadf9f"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5104,6 +5108,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5221,6 +5226,7 @@ spec:
         configChecksum: "807825e2bc1d1dc69164fbea82af93461fcf79e35ad2c0929e03df2f1e14935"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5320,7 +5326,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -5457,7 +5463,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -5634,6 +5640,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -5798,6 +5805,7 @@ spec:
         configChecksum: "f99369e37d4a20dded730f6900a334aaa4b1b1c3e62f534e17d7967785c62a8"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.dcgm-exporter.yaml b/tests/generated/dataplane.dcgm-exporter.yaml
index 6bd186bd..e95ae8da 100644
--- a/tests/generated/dataplane.dcgm-exporter.yaml
+++ b/tests/generated/dataplane.dcgm-exporter.yaml
@@ -2864,6 +2864,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5586,6 +5589,7 @@ spec:
         configChecksum: "7ff0169854ce83fe5e5cb0ec550944a512e1ea0ebc47177b32a5bf3f7fadf9f"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5687,6 +5691,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5804,6 +5809,7 @@ spec:
         configChecksum: "807825e2bc1d1dc69164fbea82af93461fcf79e35ad2c0929e03df2f1e14935"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5903,7 +5909,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -6040,7 +6046,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -6217,6 +6223,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6381,6 +6388,7 @@ spec:
         configChecksum: "f99369e37d4a20dded730f6900a334aaa4b1b1c3e62f534e17d7967785c62a8"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.fully-selfhosted.yaml b/tests/generated/dataplane.fully-selfhosted.yaml
index eda745e0..fc39b58b 100644
--- a/tests/generated/dataplane.fully-selfhosted.yaml
+++ b/tests/generated/dataplane.fully-selfhosted.yaml
@@ -2749,6 +2749,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       org:
         namespaceTemplate: "{{ project }}-{{ domain }}"
       imageBuilder:
@@ -5265,6 +5268,7 @@ spec:
         configChecksum: "43486113af17e32bea848a9fe1704b1bc13db034b74a380e02a1dfa06246bf6"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5361,6 +5365,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5478,6 +5483,7 @@ spec:
         configChecksum: "b70edc56ad7dbaa4adb4206c5ffc13ddfdf676c4ff12a7132a6795c9958ba38"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5567,7 +5573,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "000435821d0bcd39624359a5fbb0e76133408f9c7b88de2963066a0d4f73979"
+        configChecksum: "f4c720571931d4374bbaaa22101950fceed6bbb44dec2a3f0d0d8f1e0ab5fde"
         
       labels:
         
@@ -5673,7 +5679,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "000435821d0bcd39624359a5fbb0e76133408f9c7b88de2963066a0d4f73979"
+        configChecksum: "f4c720571931d4374bbaaa22101950fceed6bbb44dec2a3f0d0d8f1e0ab5fde"
         
       labels:
         
@@ -5845,6 +5851,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6009,6 +6016,7 @@ spec:
         configChecksum: "f02b9746ff65e5fbb4b730cc9ee015824d61057531d60ea6078ee2a20155bce"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.low-priv.yaml b/tests/generated/dataplane.low-priv.yaml
index a152648c..6e7c3212 100644
--- a/tests/generated/dataplane.low-priv.yaml
+++ b/tests/generated/dataplane.low-priv.yaml
@@ -2520,6 +2520,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -3785,6 +3788,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -3902,6 +3906,7 @@ spec:
         configChecksum: "b99c09d1a1a5eed74ac829e07ca2c6d82feafa4635cc4465d6cf7a5532d2b02"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -4001,7 +4006,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "f7f5f698acf17a13b490c4ab8cda26b527fa5a1987387e4d68616bf79c2825c"
+        configChecksum: "69aef76847958ab05336281aaac503f93ef70f6722254e90d89fd7043ef2616"
         
       labels:
         
@@ -4136,7 +4141,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "f7f5f698acf17a13b490c4ab8cda26b527fa5a1987387e4d68616bf79c2825c"
+        configChecksum: "69aef76847958ab05336281aaac503f93ef70f6722254e90d89fd7043ef2616"
         
       labels:
         
@@ -4313,6 +4318,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -4477,6 +4483,7 @@ spec:
         configChecksum: "1802a3a59db84835bdd2fc604d1b6be50ee3e55489f40c43e896d4c300638ce"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.monitoring.yaml b/tests/generated/dataplane.monitoring.yaml
index bcb9c10f..39e5f973 100644
--- a/tests/generated/dataplane.monitoring.yaml
+++ b/tests/generated/dataplane.monitoring.yaml
@@ -3562,6 +3562,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -7358,6 +7361,7 @@ spec:
         configChecksum: "b89195349d21821191ee5fb1fc7860a8b7f731def169473cb1b19bf1ccf3a5b"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -7459,6 +7463,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -7576,6 +7581,7 @@ spec:
         configChecksum: "64f28ca5411984cdabd3525b7aa976f59585963e18cdcdb42787bc61f930e8d"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -7675,7 +7681,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "51d74a7f574f0f70d0169f47ad70a126c62fb495b8f87924ea0481f9fb873a1"
+        configChecksum: "62355570fcd9b811440c9e2742ebfc5076dac141f095e26b4f4ce7eaedee597"
         
       labels:
         
@@ -7812,7 +7818,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "51d74a7f574f0f70d0169f47ad70a126c62fb495b8f87924ea0481f9fb873a1"
+        configChecksum: "62355570fcd9b811440c9e2742ebfc5076dac141f095e26b4f4ce7eaedee597"
         
       labels:
         
@@ -7989,6 +7995,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -8153,6 +8160,7 @@ spec:
         configChecksum: "cbe1beeb4c6ff02d65b3aa8b3bbda0c740fca914d93dbb0bf0fae058c1dae5f"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.nodeobserver.yaml b/tests/generated/dataplane.nodeobserver.yaml
index 4e04aaaf..efd5f8ca 100644
--- a/tests/generated/dataplane.nodeobserver.yaml
+++ b/tests/generated/dataplane.nodeobserver.yaml
@@ -2758,6 +2758,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5114,6 +5117,7 @@ spec:
         configChecksum: "53588c33a77619d28361e2b7ac9d8d903680ecb12be9214e4adb74210f52d03"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: nodeobserver
         app.kubernetes.io/instance: release-name
@@ -5395,6 +5399,7 @@ spec:
         configChecksum: "7ff0169854ce83fe5e5cb0ec550944a512e1ea0ebc47177b32a5bf3f7fadf9f"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5496,6 +5501,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5613,6 +5619,7 @@ spec:
         configChecksum: "807825e2bc1d1dc69164fbea82af93461fcf79e35ad2c0929e03df2f1e14935"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5712,7 +5719,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -5849,7 +5856,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "46f95ee2e9bca8f63bec38590146c738cb7dfc86e6376ded8cec4261e565070"
+        configChecksum: "0d3d3093adf1cf4b2bb08dfec3df8021cea0b4660395075f002f399062a3485"
         
       labels:
         
@@ -6026,6 +6033,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6190,6 +6198,7 @@ spec:
         configChecksum: "f99369e37d4a20dded730f6900a334aaa4b1b1c3e62f534e17d7967785c62a8"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller
diff --git a/tests/generated/dataplane.oci.yaml b/tests/generated/dataplane.oci.yaml
index b3682921..6b13039c 100644
--- a/tests/generated/dataplane.oci.yaml
+++ b/tests/generated/dataplane.oci.yaml
@@ -2770,6 +2770,9 @@ data:
           endpoint: 'http://flytepropeller:10254'
         proxy:
           endpoint: 'http://union-operator-proxy:10254'
+      secretsWatcher:
+        dryRun: true
+        enabled: false
       imageBuilder:
         enabled: true
         executionNamespaceLabels:
@@ -5288,6 +5291,7 @@ spec:
         configChecksum: "1bd09818f02c1912f9c75c474a35e8edb80667a3f7942753afb237355631f6f"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: clusterresourcesync
         app.kubernetes.io/instance: release-name
@@ -5403,6 +5407,7 @@ spec:
       annotations:
         container.apparmor.security.beta.kubernetes.io/buildkit: unconfined
       labels:
+        platform.union.ai/zone: "dataplane"
         app.kubernetes.io/name: imagebuilder-buildkit
         app.kubernetes.io/instance: release-name
     spec:
@@ -5526,6 +5531,7 @@ spec:
         configChecksum: "5518a4d42a7f64a68f4856df98a6be10e932a27e2faf82a4fcc9375c4f1e290"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app: executor
     spec:
@@ -5639,7 +5645,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "3a8881351bd4741bb6abf7885f7b8e6a316ec4783f5815461a17afd2cdde231"
+        configChecksum: "7f52c9e14faa1e4b045aefd2b6b01472e62a3941cf6b1889d00ae80c4e42a6e"
         
       labels:
         
@@ -5790,7 +5796,7 @@ spec:
   template:
     metadata:
       annotations:
-        configChecksum: "3a8881351bd4741bb6abf7885f7b8e6a316ec4783f5815461a17afd2cdde231"
+        configChecksum: "7f52c9e14faa1e4b045aefd2b6b01472e62a3941cf6b1889d00ae80c4e42a6e"
         
       labels:
         
@@ -5981,6 +5987,7 @@ spec:
   template:
     metadata:
       labels:
+        platform.union.ai/zone: "dataplane"
         
         app.kubernetes.io/name: flyte-pod-webhook
         app.kubernetes.io/instance: release-name
@@ -6165,6 +6172,7 @@ spec:
         configChecksum: "f3931dbcb3b33014ce22a4a663e84dbaadd5fb0aa0728492a9042bc8bbac1b9"
         
       labels:
+        platform.union.ai/zone: "dataplane"
         
         
         app.kubernetes.io/name: flytepropeller