Trying to set labels for ServiceMonitor using Keycloak CRD

I’ve installed the Keycloak operator and a test Keycloak instance. In the Keycloak instance, I’ve added secondaryResources for the ServiceMonitor and PrometheusRule. However, my Prometheus instance requires a label “release=my-release”. How do I specify additional labels for the ServiceMonitor & PrometheusRule created by the Keycloak custom resource? As it is, if I label the ServiceMonitor & PrometheusRule after they are created, the label gets removed when the resources are reconciled.