diff --git a/modules/certmanager/issuer.go b/modules/certmanager/issuer.go
index 12041257..48f99ede 100644
--- a/modules/certmanager/issuer.go
+++ b/modules/certmanager/issuer.go
@@ -30,6 +30,11 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
 )
 
+const (
+	// RootCAIssuerInternalLabel for internal RootCA to issue internal TLS Certs
+	RootCAIssuerInternalLabel = "osp-rootca-issuer-internal"
+)
+
 // Issuer -
 type Issuer struct {
 	issuer  *certmgrv1.Issuer