diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 02cc780ae..5b8a0ec9e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,12 +4,35 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    ignore:
+    # Ignore controller-runtime as its upgraded manually.
+    - dependency-name: "sigs.k8s.io/controller-runtime"
+    # Ignore cluster-api as its upgraded manually.
+    - dependency-name: "sigs.k8s.io/cluster-api/*"
+    # Ignore k8s and its transitives modules as they are upgraded manually
+    # together with controller-runtime.
+    - dependency-name: "k8s.io/*"
+    - dependency-name: "github.com/onsi/*"
+    labels:
+      - "ok-to-test"
 
   # Enable version updates for Go tools
   - package-ecosystem: "gomod"
     directory: "/hack/tools"
     schedule:
       interval: "weekly"
+    ignore:
+    # Ignore controller-runtime as its upgraded manually.
+    - dependency-name: "sigs.k8s.io/controller-runtime/*"
+    # Ignore cluster-api as its upgraded manually.
+    - dependency-name: "sigs.k8s.io/cluster-api/*"
+    - dependency-name: "sigs.k8s.io/controller-tools"
+    # Ignore k8s and its transitives modules as they are upgraded manually
+    # together with controller-runtime.
+    - dependency-name: "k8s.io/*"
+    - dependency-name: "github.com/onsi/*"
+    labels:
+      - "ok-to-test"
 
   - package-ecosystem: "docker"
     directory: "/"