diff --git a/terraform/environments/deployment.tf b/terraform/environments/deployment.tf
index 7f33d5e9863f4777d975ebb7e149bf11a80c4676..2cf16726d15dd2b32b3fc92ecc37fa068c6ee9f6 100644
--- a/terraform/environments/deployment.tf
+++ b/terraform/environments/deployment.tf
@@ -82,6 +82,10 @@ resource "google_cloud_run_service" "donations_api" {
         # possible values: all-traffic/private-ranges-only(default) https://cloud.google.com/sdk/gcloud/reference/run/services/update#--vpc-egress
         "run.googleapis.com/vpc-access-egress" = "private-ranges-only"
       }
+      labels = {
+        "environment_type" = local.environment_type
+        "holi_service"     = "app-donations"
+      }
     }
   }
 
diff --git a/terraform/environments/vars.tf b/terraform/environments/vars.tf
index 6ade95cbd45edf6a2a1d950544860014f431e27d..3559ec6ebf78a8d721b0ef46aca86875eba447d8 100644
--- a/terraform/environments/vars.tf
+++ b/terraform/environments/vars.tf
@@ -2,6 +2,7 @@ locals {
   # predefined environment names are staging, production, and <branchname>
   environment      = terraform.workspace
   environment_name = trim(substr(local.environment, 0, 22), ".-") # limits the length of the name that it fits constraints google imposes for some resources, e.g. project ids
+  environment_type = contains(["staging", "production"], local.environment) ? local.environment : "review"
 
   # the dns name can be at most 64 chars in total
   dns_name = "${trimsuffix(substr(local.environment, 0, 34), ".-")}.${data.terraform_remote_state.holi_donations_api_common_state.outputs.dns_donations_api_domain}"