diff --git a/config/crd/bases/tenant.otterscale.io_workspaces.yaml b/config/crd/bases/tenant.otterscale.io_workspaces.yaml
index b3d155d..027ffbb 100644
--- a/config/crd/bases/tenant.otterscale.io_workspaces.yaml
+++ b/config/crd/bases/tenant.otterscale.io_workspaces.yaml
@@ -365,6 +365,21 @@ spec:
                 x-kubernetes-list-map-keys:
                 - type
                 x-kubernetes-list-type: map
+              helmRepositoryRef:
+                description: HelmRepositoryRef is a reference to the FluxCD HelmRepository
+                  for this workspace's Harbor OCI registry.
+                properties:
+                  name:
+                    description: Name is the name of the referenced resource.
+                    type: string
+                  namespace:
+                    description: |-
+                      Namespace is the namespace of the referenced resource.
+                      Empty for cluster-scoped resources.
+                    type: string
+                required:
+                - name
+                type: object
               imagePullSecretRef:
                 description: |-
                   ImagePullSecretRef is a reference to the docker-registry Secret
diff --git a/tenant/v1alpha1/workspace_types.go b/tenant/v1alpha1/workspace_types.go
index b9c64b5..76dd5a1 100644
--- a/tenant/v1alpha1/workspace_types.go
+++ b/tenant/v1alpha1/workspace_types.go
@@ -173,6 +173,10 @@ type WorkspaceStatus struct {
 	// +optional
 	ImagePullSecretRef *ResourceReference `json:"imagePullSecretRef,omitempty"`
 
+	// HelmRepositoryRef is a reference to the FluxCD HelmRepository for this workspace's Harbor OCI registry.
+	// +optional
+	HelmRepositoryRef *ResourceReference `json:"helmRepositoryRef,omitempty"`
+
 	// Conditions store the status conditions of the Workspace (e.g., Ready, Failed).
 	// +listType=map
 	// +listMapKey=type
diff --git a/tenant/v1alpha1/zz_generated.deepcopy.go b/tenant/v1alpha1/zz_generated.deepcopy.go
index 7547b9a..13a69e3 100644
--- a/tenant/v1alpha1/zz_generated.deepcopy.go
+++ b/tenant/v1alpha1/zz_generated.deepcopy.go
@@ -221,6 +221,11 @@ func (in *WorkspaceStatus) DeepCopyInto(out *WorkspaceStatus) {
 		*out = new(ResourceReference)
 		**out = **in
 	}
+	if in.HelmRepositoryRef != nil {
+		in, out := &in.HelmRepositoryRef, &out.HelmRepositoryRef
+		*out = new(ResourceReference)
+		**out = **in
+	}
 	if in.Conditions != nil {
 		in, out := &in.Conditions, &out.Conditions
 		*out = make([]metav1.Condition, len(*in))