diff --git a/examples/safer_cluster_iap_bastion/cluster.tf b/examples/safer_cluster_iap_bastion/cluster.tf
index f6d1b38312..0819e45adf 100644
--- a/examples/safer_cluster_iap_bastion/cluster.tf
+++ b/examples/safer_cluster_iap_bastion/cluster.tf
@@ -47,4 +47,5 @@ module "gke" {
     key_name = var.database_encryption_key_name
   }]
   datapath_provider = var.datapath_provider
+  cluster_resource_labels = var.cluster_resource_labels
 }
diff --git a/examples/safer_cluster_iap_bastion/variables.tf b/examples/safer_cluster_iap_bastion/variables.tf
index e6eef6a295..66464dd88b 100644
--- a/examples/safer_cluster_iap_bastion/variables.tf
+++ b/examples/safer_cluster_iap_bastion/variables.tf
@@ -110,3 +110,9 @@ variable "datapath_provider" {
   description = "The desired datapath provider for this cluster. By default, `ADVANCED_DATAPATH` enables Dataplane-V2 feature. `DATAPATH_PROVIDER_UNSPECIFIED` enables the IPTables-based kube-proxy implementation as a fallback since upgrading to V2 requires a cluster re-creation."
   default     = "DATAPATH_PROVIDER_UNSPECIFIED"
 }
+
+variable "cluster_resource_labels" {
+  type        = map(string)
+  description = "The GCE resource labels (a map of key/value pairs) to be applied to the cluster"
+  default     = {}
+}
\ No newline at end of file