diff --git a/deployments/sgx_plugin/overlays/epc-nfd/kustomization.yaml b/deployments/sgx_plugin/overlays/epc-nfd/kustomization.yaml
index 88c9a6f09..9821dc606 100644
--- a/deployments/sgx_plugin/overlays/epc-nfd/kustomization.yaml
+++ b/deployments/sgx_plugin/overlays/epc-nfd/kustomization.yaml
@@ -2,6 +2,11 @@ resources:
   - ../../base
   - ../../../sgx_admissionwebhook/overlays/default-with-certmanager
 
+patches:
+- path: nfd_label.yaml
+  target:
+    name: intel-sgx-plugin
+
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 replacements:
diff --git a/deployments/sgx_plugin/overlays/epc-nfd/nfd_label.yaml b/deployments/sgx_plugin/overlays/epc-nfd/nfd_label.yaml
new file mode 100644
index 000000000..8de359bd0
--- /dev/null
+++ b/deployments/sgx_plugin/overlays/epc-nfd/nfd_label.yaml
@@ -0,0 +1,9 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: intel-sgx-plugin
+spec:
+  template:
+    spec:
+      nodeSelector:
+        intel.feature.node.kubernetes.io/sgx: "true"