diff --git a/terraform/environments/deployment_push_gateway.tf b/terraform/environments/deployment_push_gateway.tf
index 2f4a08e6db158cff4deaaa8577802c53dc4ec287..65bb402c4244fb1dbc34e88cc5377e20c09a0e0f 100644
--- a/terraform/environments/deployment_push_gateway.tf
+++ b/terraform/environments/deployment_push_gateway.tf
@@ -99,6 +99,10 @@ resource "google_cloud_run_service" "chat_push_gateway" {
         # possible values: all-traffic/private-ranges-only(default) https://cloud.google.com/sdk/gcloud/reference/run/services/update#--vpc-egress
         "run.googleapis.com/vpc-access-egress" = "private-ranges-only"
       }
+      labels = {
+        "environment_type" = local.environment_type
+        "holi_service"     = "chat-push-gateway"
+      }
     }
   }
 
diff --git a/terraform/environments/deployment_server.tf b/terraform/environments/deployment_server.tf
index 6f02b7db79ed6b9446eaf54fd4cedd17c497c750..9c2d14ab6789cacb93e3529ce56573e7e5667979 100644
--- a/terraform/environments/deployment_server.tf
+++ b/terraform/environments/deployment_server.tf
@@ -140,6 +140,10 @@ resource "google_cloud_run_service" "chat_server" {
         # this needs to be set to all-traffic in order to route a cloud run url correctly, since it does resolve to a non-private ip address.
         "run.googleapis.com/vpc-access-egress" = "all-traffic"
       }
+      labels = {
+        "environment_type" = local.environment_type
+        "holi_service"     = "chat-server"
+      }
     }
   }
 
diff --git a/terraform/environments/vars.tf b/terraform/environments/vars.tf
index ad64af7e8b91af4982d79ba986fdd46060054a00..871385f18d41f97eb4142663e47cfce9f968367c 100644
--- a/terraform/environments/vars.tf
+++ b/terraform/environments/vars.tf
@@ -2,6 +2,7 @@ locals {
   # predefined environment names are staging, production, and <branchname>
   environment      = terraform.workspace
   environment_name = trim(substr(local.environment, 0, 22), ".-") # limits the length of the name that it fits constraints google imposes for some resources, e.g. project ids
+  environment_type = contains(["staging", "production"], local.environment) ? local.environment : "review"
 
   # the dns name can be at most 64 chars in total
   # e.g. development-chat.holi.social and chat.holi.social