diff --git a/deploy/helm/pieced-operator/templates/crds/pieced.ch_piecedtenants.yaml b/deploy/helm/pieced-operator/templates/crds/pieced.ch_piecedtenants.yaml
index 68c6750..49fad61 100644
--- a/deploy/helm/pieced-operator/templates/crds/pieced.ch_piecedtenants.yaml
+++ b/deploy/helm/pieced-operator/templates/crds/pieced.ch_piecedtenants.yaml
@@ -74,6 +74,16 @@ spec:
                     Seeded once — runtime mutations persist on PVC.
                   additionalProperties:
                     type: string
+                channelUsers:
+                  type: object
+                  description: >
+                    Maps channel names (telegram, discord, etc.) to lists of authorized
+                    user IDs. Sets dmPolicy to "allowlist" and populates allowFrom for
+                    each channel in the OpenClawInstance config.
+                  additionalProperties:
+                    type: array
+                    items:
+                      type: string
                 suspend:
                   type: boolean
                   description: Stops reconciliation without deleting resources.