diff --git a/config/crd/bases/nyamber.cybozu.io_autovirtualdcs.yaml b/config/crd/bases/nyamber.cybozu.io_autovirtualdcs.yaml
index 79b39b5..a59eb8c 100644
--- a/config/crd/bases/nyamber.cybozu.io_autovirtualdcs.yaml
+++ b/config/crd/bases/nyamber.cybozu.io_autovirtualdcs.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.15.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: autovirtualdcs.nyamber.cybozu.io
 spec:
   group: nyamber.cybozu.io
@@ -97,11 +97,9 @@ spec:
                               Claims lists the names of resources, defined in spec.resourceClaims,
                               that are used by this container.
 
-
                               This is an alpha field and requires enabling the
                               DynamicResourceAllocation feature gate.
 
-
                               This field is immutable. It can only be set for containers.
                             items:
                               description: ResourceClaim references one entry in PodSpec.ResourceClaims.
@@ -112,6 +110,12 @@ spec:
                                     the Pod where this field is used. It makes that resource available
                                     inside a container.
                                   type: string
+                                request:
+                                  description: |-
+                                    Request is the name chosen for a request in the referenced claim.
+                                    If empty, everything from the claim is made available, otherwise
+                                    only the result of this request.
+                                  type: string
                               required:
                               - name
                               type: object
@@ -154,18 +158,8 @@ spec:
                       conditions:
                         description: Conditions is an array of conditions.
                         items:
-                          description: "Condition contains details for one aspect
-                            of the current state of this API Resource.\n---\nThis
-                            struct is intended for direct use as an array at the field
-                            path .status.conditions.  For example,\n\n\n\ttype FooStatus
-                            struct{\n\t    // Represents the observations of a foo's
-                            current state.\n\t    // Known .status.conditions.type
-                            are: \"Available\", \"Progressing\", and \"Degraded\"\n\t
-                            \   // +patchMergeKey=type\n\t    // +patchStrategy=merge\n\t
-                            \   // +listType=map\n\t    // +listMapKey=type\n\t    Conditions
-                            []metav1.Condition `json:\"conditions,omitempty\" patchStrategy:\"merge\"
-                            patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
-                            \   // other fields\n\t}"
+                          description: Condition contains details for one aspect of
+                            the current state of this API Resource.
                           properties:
                             lastTransitionTime:
                               description: |-
@@ -207,12 +201,7 @@ spec:
                               - Unknown
                               type: string
                             type:
-                              description: |-
-                                type of condition in CamelCase or in foo.example.com/CamelCase.
-                                ---
-                                Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
-                                useful (see .node.status.conditions), the ability to deconflict is important.
-                                The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                              description: type of condition in CamelCase or in foo.example.com/CamelCase.
                               maxLength: 316
                               pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                               type: string
diff --git a/config/crd/bases/nyamber.cybozu.io_virtualdcs.yaml b/config/crd/bases/nyamber.cybozu.io_virtualdcs.yaml
index d034704..c5038a4 100644
--- a/config/crd/bases/nyamber.cybozu.io_virtualdcs.yaml
+++ b/config/crd/bases/nyamber.cybozu.io_virtualdcs.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.15.0
+    controller-gen.kubebuilder.io/version: v0.16.3
   name: virtualdcs.nyamber.cybozu.io
 spec:
   group: nyamber.cybozu.io
@@ -75,11 +75,9 @@ spec:
                       Claims lists the names of resources, defined in spec.resourceClaims,
                       that are used by this container.
 
-
                       This is an alpha field and requires enabling the
                       DynamicResourceAllocation feature gate.
 
-
                       This field is immutable. It can only be set for containers.
                     items:
                       description: ResourceClaim references one entry in PodSpec.ResourceClaims.
@@ -90,6 +88,12 @@ spec:
                             the Pod where this field is used. It makes that resource available
                             inside a container.
                           type: string
+                        request:
+                          description: |-
+                            Request is the name chosen for a request in the referenced claim.
+                            If empty, everything from the claim is made available, otherwise
+                            only the result of this request.
+                          type: string
                       required:
                       - name
                       type: object
@@ -132,16 +136,8 @@ spec:
               conditions:
                 description: Conditions is an array of conditions.
                 items:
-                  description: "Condition contains details for one aspect of the current
-                    state of this API Resource.\n---\nThis struct is intended for
-                    direct use as an array at the field path .status.conditions.  For
-                    example,\n\n\n\ttype FooStatus struct{\n\t    // Represents the
-                    observations of a foo's current state.\n\t    // Known .status.conditions.type
-                    are: \"Available\", \"Progressing\", and \"Degraded\"\n\t    //
-                    +patchMergeKey=type\n\t    // +patchStrategy=merge\n\t    // +listType=map\n\t
-                    \   // +listMapKey=type\n\t    Conditions []metav1.Condition `json:\"conditions,omitempty\"
-                    patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
-                    \   // other fields\n\t}"
+                  description: Condition contains details for one aspect of the current
+                    state of this API Resource.
                   properties:
                     lastTransitionTime:
                       description: |-
@@ -182,12 +178,7 @@ spec:
                       - Unknown
                       type: string
                     type:
-                      description: |-
-                        type of condition in CamelCase or in foo.example.com/CamelCase.
-                        ---
-                        Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
-                        useful (see .node.status.conditions), the ability to deconflict is important.
-                        The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
+                      description: type of condition in CamelCase or in foo.example.com/CamelCase.
                       maxLength: 316
                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
                       type: string
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index f4ab545..353e410 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -8,29 +8,7 @@ rules:
   - ""
   resources:
   - configmaps
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
   - pods
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
   - services
   verbs:
   - create
@@ -44,6 +22,7 @@ rules:
   - nyamber.cybozu.io
   resources:
   - autovirtualdcs
+  - virtualdcs
   verbs:
   - create
   - delete
@@ -56,33 +35,14 @@ rules:
   - nyamber.cybozu.io
   resources:
   - autovirtualdcs/status
+  - virtualdcs/status
   verbs:
   - get
   - patch
   - update
-- apiGroups:
-  - nyamber.cybozu.io
-  resources:
-  - virtualdcs
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - nyamber.cybozu.io
   resources:
   - virtualdcs/finalizers
   verbs:
   - update
-- apiGroups:
-  - nyamber.cybozu.io
-  resources:
-  - virtualdcs/status
-  verbs:
-  - get
-  - patch
-  - update