diff --git a/charts/theia-cloud-crds/templates/session-spec-resource.yaml b/charts/theia-cloud-crds/templates/session-spec-resource.yaml
index d4a1988..6229ffb 100644
--- a/charts/theia-cloud-crds/templates/session-spec-resource.yaml
+++ b/charts/theia-cloud-crds/templates/session-spec-resource.yaml
@@ -11,10 +11,80 @@ spec:
     singular: session
   scope: Namespaced
   versions:
-    - name : v6beta
+    - name : v7beta
       served: true
       storage: true
       # subresources describes the subresources for custom resources.
+      subresources:
+        # status enables the status subresource.
+        status: {}
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                name:
+                  type: string
+                  pattern: '^[a-z0-9A-Z-_]+$'
+                workspace:
+                  type: string
+                appDefinition: # cached from workspace
+                  type: string
+                  pattern: '^[a-z0-9A-Z-_]+$'
+                user: # cached from workspace
+                  type: string
+                url:
+                  type: string
+                error:
+                  type: string
+                sessionSecret:
+                  type: string
+                lastActivity:
+                  type: integer
+                envVars:
+                  type: object
+                  additionalProperties:
+                    x-kubernetes-int-or-string: true
+                envVarsFromConfigMaps:
+                  type: array
+                  items:
+                    type: string
+                envVarsFromSecrets:
+                  type: array
+                  items:
+                    type: string
+                initOperations:
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      id:
+                        type: string
+                      arguments:
+                        type: array
+                        items:
+                          type: string
+                    required:
+                      - id
+              required:
+                - name
+                - user
+                - appDefinition
+            status:
+              type: object
+              properties:
+                operatorStatus:
+                  type: string
+                operatorMessage:
+                  type: string
+          required:
+            - spec
+    - name : v6beta
+      served: true
+      storage: false
+      # subresources describes the subresources for custom resources.
       subresources:
         # status enables the status subresource.
         status: {}
diff --git a/charts/theia.cloud-base/templates/operator-role.yaml b/charts/theia.cloud-base/templates/operator-role.yaml
index cab0291..08a8a01 100644
--- a/charts/theia.cloud-base/templates/operator-role.yaml
+++ b/charts/theia.cloud-base/templates/operator-role.yaml
@@ -26,5 +26,6 @@ rules:
       - configmaps
       - deployments
       - leases
+      - secrets
     verbs: ["list", "create", "watch", "get", "patch", "delete", "update"]
-    
\ No newline at end of file
+