diff --git a/config/crd/bases/stardog.vshn.ch_databases.yaml b/config/crd/bases/stardog.vshn.ch_databases.yaml
new file mode 100644
index 0000000..41a2c49
--- /dev/null
+++ b/config/crd/bases/stardog.vshn.ch_databases.yaml
@@ -0,0 +1,120 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: databases.stardog.vshn.ch
+spec:
+  group: stardog.vshn.ch
+  names:
+    kind: Database
+    listKind: DatabaseList
+    plural: databases
+    singular: database
+  scope: Cluster
+  versions:
+  - name: v1beta1
+    schema:
+      openAPIV3Schema:
+        description: Database is the Schema for the databases API
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: DatabaseSpec defines the desired state of the Database
+            properties:
+              addUserForNonHiddenGraphs:
+                description: |-
+                  AddUserForNonHiddenGraphs a dynamically managed user of this db with custom permissions
+                  Mainly used to not have access to hidden graphs
+                type: string
+              databaseName:
+                description: DatabaseName the database name that has to be created
+                  in the Stardog server
+                type: string
+              namedGraphPrefix:
+                description: NamedGraphPrefix a prefix for a Stardog Named Graph.
+                type: string
+              options:
+                description: Options is the Stardog configuration options for this
+                  database. Only json input is valid.
+                type: string
+              stardogInstanceRefs:
+                description: StardogInstanceRefs contains the reference to the Stardog
+                  instance the database should exist in
+                items:
+                  description: StardogInstanceRef contains name and namespace for
+                    a stardog instance
+                  properties:
+                    name:
+                      type: string
+                    namespace:
+                      type: string
+                  type: object
+                type: array
+            type: object
+          status:
+            description: DatabaseStatus defines the observed state of the Database
+            properties:
+              addUserForNonHiddenGraphs:
+                type: string
+              conditions:
+                items:
+                  description: StardogCondition describes a status condition of a
+                    StardogRole
+                  properties:
+                    lastTransitionTime:
+                      format: date-time
+                      type: string
+                    message:
+                      type: string
+                    reason:
+                      type: string
+                    status:
+                      type: string
+                    type:
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+              databaseName:
+                type: string
+              namedGraphPrefix:
+                type: string
+              options:
+                type: string
+              stardogInstanceRef:
+                items:
+                  description: StardogInstanceRef contains name and namespace for
+                    a stardog instance
+                  properties:
+                    name:
+                      type: string
+                    namespace:
+                      type: string
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/config/crd/bases/stardog.vshn.ch_organizations.yaml b/config/crd/bases/stardog.vshn.ch_organizations.yaml
new file mode 100644
index 0000000..4446d04
--- /dev/null
+++ b/config/crd/bases/stardog.vshn.ch_organizations.yaml
@@ -0,0 +1,136 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: organizations.stardog.vshn.ch
+spec:
+  group: stardog.vshn.ch
+  names:
+    kind: Organization
+    listKind: OrganizationList
+    plural: organizations
+    singular: organization
+  scope: Cluster
+  versions:
+  - name: v1beta1
+    schema:
+      openAPIV3Schema:
+        description: Organization is the Schema for the organizations API
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: OrganizationSpec defines the desired state of an Organization
+            properties:
+              databaseRef:
+                description: DatabaseRef is the name of the Database this Organization
+                  is assigned to
+                type: string
+              displayName:
+                description: DisplayName is the long name of an organization
+                type: string
+              name:
+                description: Name is the short name of an organization
+                type: string
+              namedGraphs:
+                description: |-
+                  NamedGraphs are the suffix graph names for this organization. The prefix can be found in the Database resource.
+                  The final graphs is defined as prefix + "/" + orgName + "/" suffix
+                items:
+                  description: NamedGraph defines the name and if necessary add another
+                    hidden named graph for this named graph
+                  properties:
+                    addHidden:
+                      default: false
+                      description: AddHidden adds another graph with the same name
+                        but with a prefix "<named-graph-name/hidden>"
+                      type: boolean
+                    name:
+                      description: The name of the Named Graph
+                      type: string
+                  required:
+                  - addHidden
+                  type: object
+                type: array
+            type: object
+          status:
+            description: OrganizationStatus defines the observed state of the Organization
+            properties:
+              conditions:
+                items:
+                  description: StardogCondition describes a status condition of a
+                    StardogRole
+                  properties:
+                    lastTransitionTime:
+                      format: date-time
+                      type: string
+                    message:
+                      type: string
+                    reason:
+                      type: string
+                    status:
+                      type: string
+                    type:
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+              databaseRef:
+                type: string
+              displayName:
+                type: string
+              name:
+                type: string
+              namedGraphs:
+                items:
+                  description: NamedGraph defines the name and if necessary add another
+                    hidden named graph for this named graph
+                  properties:
+                    addHidden:
+                      default: false
+                      description: AddHidden adds another graph with the same name
+                        but with a prefix "<named-graph-name/hidden>"
+                      type: boolean
+                    name:
+                      description: The name of the Named Graph
+                      type: string
+                  required:
+                  - addHidden
+                  type: object
+                type: array
+              stardogInstanceRefs:
+                items:
+                  description: StardogInstanceRef contains name and namespace for
+                    a stardog instance
+                  properties:
+                    name:
+                      type: string
+                    namespace:
+                      type: string
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/config/crd/bases/stardog.vshn.ch_stardoginstances.yaml b/config/crd/bases/stardog.vshn.ch_stardoginstances.yaml
new file mode 100644
index 0000000..d107dcc
--- /dev/null
+++ b/config/crd/bases/stardog.vshn.ch_stardoginstances.yaml
@@ -0,0 +1,98 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: stardoginstances.stardog.vshn.ch
+spec:
+  group: stardog.vshn.ch
+  names:
+    kind: StardogInstance
+    listKind: StardogInstanceList
+    plural: stardoginstances
+    singular: stardoginstance
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: StardogInstance contains information about a Stardog server or
+          cluster.
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: StardogInstanceSpec defines the desired state of StardogInstance
+            properties:
+              adminCredentials:
+                description: |-
+                  AdminCredentials references the credentials that gives administrative access to the Stardog instance.
+                  This is used by the Operator to make changes in the roles, permissions and users.
+                properties:
+                  namespace:
+                    description: |-
+                      Namespace specifies the namespace of the Secret referenced in SecretRef.
+                      Defaults to .metadata.namespace.
+                    type: string
+                  secretRef:
+                    description: SecretRef references the v1/Secret name which contains
+                      the "username" and "password" keys.
+                    type: string
+                type: object
+              disabled:
+                description: Disabled whether this instance is disabled or enabled
+                  for operator to recycle resources
+                type: boolean
+              serverUrl:
+                description: ServerUrl describes the url of the Stardog Instance
+                type: string
+            type: object
+          status:
+            description: StardogInstanceStatus defines the observed state of StardogInstance
+            properties:
+              conditions:
+                description: Conditions contain the states of the StardogInstance.
+                  A StardogInstance is considered Ready when the Admin user can make
+                  authorized REST API calls.
+                items:
+                  description: StardogCondition describes a status condition of a
+                    StardogRole
+                  properties:
+                    lastTransitionTime:
+                      format: date-time
+                      type: string
+                    message:
+                      type: string
+                    reason:
+                      type: string
+                    status:
+                      type: string
+                    type:
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/config/crd/bases/stardog.vshn.ch_stardogroles.yaml b/config/crd/bases/stardog.vshn.ch_stardogroles.yaml
new file mode 100644
index 0000000..097e69a
--- /dev/null
+++ b/config/crd/bases/stardog.vshn.ch_stardogroles.yaml
@@ -0,0 +1,126 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: stardogroles.stardog.vshn.ch
+spec:
+  group: stardog.vshn.ch
+  names:
+    kind: StardogRole
+    listKind: StardogRoleList
+    plural: stardogroles
+    singular: stardogrole
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: StardogRole is the Schema for the stardogroles API
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: StardogRoleSpec defines the desired state of StardogRole
+            properties:
+              permissions:
+                description: Permissions lists the permissions assigned to a role
+                items:
+                  description: StardogPermissionSpec defines a Stardog permission
+                    assigned to a Role
+                  properties:
+                    action:
+                      description: Action describes the action a specific permission
+                        is assigned to
+                      enum:
+                      - ALL
+                      - CREATE
+                      - DELETE
+                      - READ
+                      - WRITE
+                      - GRANT
+                      - REVOKE
+                      - EXECUTE
+                      type: string
+                    resourceType:
+                      description: ResourceType describes the type of resource a specific
+                        permission is assigned to
+                      enum:
+                      - DB
+                      - USER
+                      - ROLE
+                      - ADMIN
+                      - METADATA
+                      - NAMED-GRAPH
+                      - VIRTUAL-GRAPH
+                      - ICV-CONSTRAINTS
+                      - SENSITIVE-PROPERTIES
+                      - '*'
+                      type: string
+                    resources:
+                      description: Resources is a list of permission objects that
+                        get each targeted by the action and resource type properties
+                      items:
+                        type: string
+                      type: array
+                  type: object
+                type: array
+              roleName:
+                description: |-
+                  RoleName describes (overrides) the name of a role that will be maintained in a Stardog instance.
+                  Defaults to .metadata.name.
+                type: string
+              stardogInstanceRef:
+                description: StardogInstanceRef references the StardogInstance object
+                  in which the role is maintained.
+                type: string
+            type: object
+          status:
+            description: StardogRoleStatus defines the observed state of StardogRole
+            properties:
+              conditions:
+                description: |-
+                  Conditions contain the states of the StardogRole. A StardogRole is considered Ready when the role has been
+                  persisted to Stardog DB.
+                items:
+                  description: StardogCondition describes a status condition of a
+                    StardogRole
+                  properties:
+                    lastTransitionTime:
+                      format: date-time
+                      type: string
+                    message:
+                      type: string
+                    reason:
+                      type: string
+                    status:
+                      type: string
+                    type:
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
diff --git a/config/crd/bases/stardog.vshn.ch_stardogusers.yaml b/config/crd/bases/stardog.vshn.ch_stardogusers.yaml
new file mode 100644
index 0000000..3f3f4f2
--- /dev/null
+++ b/config/crd/bases/stardog.vshn.ch_stardogusers.yaml
@@ -0,0 +1,99 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.14.0
+  name: stardogusers.stardog.vshn.ch
+spec:
+  group: stardog.vshn.ch
+  names:
+    kind: StardogUser
+    listKind: StardogUserList
+    plural: stardogusers
+    singular: stardoguser
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: StardogUser is the Schema for the stardogusers API
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: StardogUserSpec defines the desired state of StardogUser
+            properties:
+              credentials:
+                description: StardogUserCredentialsSpec describes the credentials
+                  of a Stardog user
+                properties:
+                  namespace:
+                    description: |-
+                      Namespace specifies the namespace of the Secret referenced in SecretRef.
+                      Defaults to .metadata.namespace.
+                    type: string
+                  secretRef:
+                    description: SecretRef references the v1/Secret name which contains
+                      the "username" and "password" keys.
+                    type: string
+                type: object
+              roles:
+                description: Roles describe a list of StardogRoles assigned to a Stardog
+                  user. The names are referring the StardogRole metadata names, not
+                  the role name that is supposed to be in Stardog.
+                items:
+                  type: string
+                type: array
+              stardogInstanceRef:
+                description: StardogInstanceRef references a StardogInstance object.
+                type: string
+            type: object
+          status:
+            description: StardogUserStatus defines the observed state of StardogUser
+            properties:
+              conditions:
+                description: |-
+                  Conditions contain the states of the StardogUser. A StardogUser is considered Ready when the user has been
+                  persisted to Stardog DB.
+                items:
+                  description: StardogCondition describes a status condition of a
+                    StardogRole
+                  properties:
+                    lastTransitionTime:
+                      format: date-time
+                      type: string
+                    message:
+                      type: string
+                    reason:
+                      type: string
+                    status:
+                      type: string
+                    type:
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}