podLabels need to be a superset of the selector matchLabels for a service, statefulset, or deployment. However, the current operator only supports that they be equal. This makes it impossible to update pod labels without undertaking a very manual and potentially destructive operation to delete the manager object and hope that the operator can recreate it before other things go wrong. If there were separate fields in the CRD for podLabels and matchLabels it would be easy to add/remove the pod labels without this risk.