diff --git a/README.md b/README.md
index dfcfe4c..f7093f4 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,159 @@
-# platform-ref-aws-castai
+# Platform Reference Architecture for AWS EKS with CASTAI
+
+This repo provides a configuration for AWS EKS with CASTAI, built on top of Crossplane. This configuration exposes a simple API to your internal developers for creating Kubernetes clusters. In the background, this configuration can create clusters in AWS. It automatically applies common recommended practices, such as connecting the cluster to existing Flux deployments, automating VPC setup, and creating a Flux operator in a cluster and uses CASTAI as cluster autoscaler.
+
+This repo is a starting point for you to deliver your own Cluster-as-a-Service. Fork this repository and customize the configuration to meet your teams' needs.
+
+Advantages of Cluster-as-a-Service:
+
+- GitOps workflow
+- Production-ready template
+- Scalable architecture
+- CASTAI cluster autoscaler
+- Product agnostic approach
+
+## Quickstart
+
+To deploy in a new organization, follow the [Get Started guide](https://docs.upbound.io/quickstart/).
+
+For deployments to an existing organization, log in to your Upbound organization
+and go to **Configurations** and click **Create Configuration**.
+
+Connect your Upbound organization to GitHub. Select the Github organization and
+repository name for your cloned repo and choose the **platform-ref-aws-castai** configuration.
+
+When your new configuration is ready, create a new control plane based on the
+cloned repo you just created.
+
+After a few minutes, your new control plane is ready!
+
+Once authenticated and configured, your self-service Upbound console lists
+available cloud resources.
+
+### Prerequisites
+
+- CAST AI account
+- CAST AI Credentials
+- AWS Credentials
+
+### Set up ProviderConfig for CASTAI
+
+Before we can use the reference configuration we need to configure it with CAST AI FullAccess API Access Key:
+- Obtained CAST AI [API Access Key](https://docs.cast.ai/docs/authentication#obtaining-api-access-key)
+
+```console
+# Create Secret with CAST AI API Access Key
+cat <<EOF | ${KUBECTL} apply -f -
+apiVersion: v1
+kind: Secret
+metadata:
+  name: castai-creds
+  namespace: upbound-system
+type: Opaque
+stringData:
+  credentials: |
+    {
+      "api_token": "y0ur-t0k3n",
+      "api_url": "https://api.cast.ai"
+    }
+EOF
+
+# Configure the CAST AI Provider to use the secret:
+kubectl apply -f examples/castai-default-provider.yaml
+```
+
+### Set up ProviderConfig for AWS
+Authenticate your managed control plane with external services [here](https://docs.upbound.io/concepts/mcp/oidc)
+
+
+## Using the Platform Reference Architecture for AWS EKS with CASTAI
+
+Create the Configuration:
+```console
+kubectl apply -f examples/cluster.yaml
+```
+
+
+🎉 Congratulations. You have just installed your Platform Reference Architecture for AWS EKS with CASTAI!
+
+## Overview
+
+```
+XCluster/platform-ref-aws-castai-8jzvs                                                True     True    Available   
+├─ Usage/platform-ref-aws-castai-8jzvs-vcfhp                                          -        True    Available   
+├─ Usage/platform-ref-aws-castai-8jzvs-wlkz5                                          -        True    Available   
+├─ Usage/platform-ref-aws-castai-8jzvs-wsbxh                                          -        True    Available   
+├─ XEKS/platform-ref-aws-castai-8jzvs-292jc                                           True     True    Available   
+│  ├─ SecurityGroup/platform-ref-aws-castai-8jzvs-q6bw4                               True     True    Available   
+│  ├─ Addon/platform-ref-aws-castai-8jzvs-dpvr5                                       True     True    Available   
+│  ├─ Addon/platform-ref-aws-castai-8jzvs-s94g9                                       True     True    Available   
+│  ├─ ClusterAuth/platform-ref-aws-castai-8jzvs-5g4w5                                 True     True    Available   
+│  ├─ Cluster/platform-ref-aws-castai-8jzvs-k7bmd                                     True     True    Available   
+│  ├─ NodeGroup/platform-ref-aws-castai-8jzvs-482rw                                   True     True    Available   
+│  ├─ ProviderConfig/platform-ref-aws-castai                                          -        -                   
+│  ├─ OpenIDConnectProvider/platform-ref-aws-castai-8jzvs-ql76z                       True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-8qrdk                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-hvqvw                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-vlwm9                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-wffcw                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-wgrjc                        True     True    Available   
+│  ├─ Role/platform-ref-aws-castai-8jzvs-ldj79                                        True     True    Available   
+│  ├─ Role/platform-ref-aws-castai-8jzvs-w98hp                                        True     True    Available   
+│  ├─ Object/platform-ref-aws-castai-aws-auth                                         True     True    Available   
+│  ├─ Object/platform-ref-aws-castai-irsa-settings                                    True     True    Available   
+│  └─ ProviderConfig/platform-ref-aws-castai                                          -        -                   
+├─ XNetwork/platform-ref-aws-castai-8jzvs-7d2k9                                       True     True    Available   
+│  ├─ InternetGateway/platform-ref-aws-castai-8jzvs-f6tc5                             True     True    Available   
+│  ├─ MainRouteTableAssociation/platform-ref-aws-castai-8jzvs-7rqtk                   True     True    Available   
+│  ├─ RouteTableAssociation/platform-ref-aws-castai-8jzvs-8xwr8                       True     True    Available   
+│  ├─ RouteTableAssociation/platform-ref-aws-castai-8jzvs-9xjfb                       True     True    Available   
+│  ├─ RouteTableAssociation/platform-ref-aws-castai-8jzvs-ftsqm                       True     True    Available   
+│  ├─ RouteTableAssociation/platform-ref-aws-castai-8jzvs-txwpq                       True     True    Available   
+│  ├─ RouteTable/platform-ref-aws-castai-8jzvs-x8ghv                                  True     True    Available   
+│  ├─ Route/platform-ref-aws-castai-8jzvs-7qpk9                                       True     True    Available   
+│  ├─ SecurityGroupRule/platform-ref-aws-castai-8jzvs-2hjlw                           True     True    Available   
+│  ├─ SecurityGroupRule/platform-ref-aws-castai-8jzvs-4tbmb                           True     True    Available   
+│  ├─ SecurityGroup/platform-ref-aws-castai-8jzvs-qvwkc                               True     True    Available   
+│  ├─ Subnet/platform-ref-aws-castai-8jzvs-6m2l4                                      True     True    Available   
+│  ├─ Subnet/platform-ref-aws-castai-8jzvs-97d2h                                      True     True    Available   
+│  ├─ Subnet/platform-ref-aws-castai-8jzvs-c4gkl                                      True     True    Available   
+│  ├─ Subnet/platform-ref-aws-castai-8jzvs-tfw6g                                      True     True    Available   
+│  └─ VPC/platform-ref-aws-castai-8jzvs-5p56x                                         True     True    Available   
+├─ XFullAccess/platform-ref-aws-castai                                                True     True    Available   
+│  ├─ XReadOnly/platform-ref-aws-castai                                               True     True    Available   
+│  │  ├─ EksCluster/platform-ref-aws-castai-8jzvs-s5vhr                               True     True    Available   
+│  │  └─ Release/platform-ref-aws-castai-8jzvs-6c9tv                                  True     True    Available   
+│  ├─ AutoScaler/platform-ref-aws-castai-8jzvs-pltzp                                  True     True    Available   
+│  ├─ EksClusterId/platform-ref-aws-castai-8jzvs-t8jzv                                True     True    Available   
+│  ├─ EksUserArn/platform-ref-aws-castai-8jzvs-wb2hs                                  True     True    Available   
+│  ├─ NodeConfigurationDefault/platform-ref-aws-castai-8jzvs-nsxvc                    True     True    Available   
+│  ├─ NodeConfiguration/platform-ref-aws-castai-8jzvs-bpzzt                           True     True    Available   
+│  ├─ NodeTemplate/platform-ref-aws-castai-8jzvs-nxktp                                True     True    Available   
+│  ├─ Release/platform-ref-aws-castai-8jzvs-gckqx                                     True     True    Available   
+│  ├─ Release/platform-ref-aws-castai-8jzvs-mhcvx                                     True     True    Available   
+│  ├─ Release/platform-ref-aws-castai-8jzvs-pdc6p                                     True     True    Available   
+│  ├─ InstanceProfile/cast-eks-platform-ref-aws-castai-8jzvs-k7bmd-instance-profile   True     True    Available   
+│  ├─ Policy/cast-eks-platform-ref-aws-castai-8jzvs-k7bmd-cluster-policy              True     True    Available   
+│  ├─ Policy/cast-eks-platform-ref-aws-castai-8jzvs-k7bmd-cluster-policy-restricted   True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-5zhtb                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-6wq9l                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-72bqx                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-ftrgj                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-lndxg                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-w52xn                        True     True    Available   
+│  ├─ RolePolicyAttachment/platform-ref-aws-castai-8jzvs-wxklj                        True     True    Available   
+│  ├─ Role/cast-eks-platform-ref-aws-castai-8jzvs-k7bmd-cluster-role                  True     True    Available   
+│  └─ Role/cast-eks-platform-ref-aws-castai-8jzvs-k7bmd-instance-profile              True     True    Available   
+├─ XReadOnly/platform-ref-aws-castai                                                  True     True    Available   
+│  ├─ EksCluster/platform-ref-aws-castai-8jzvs-s5vhr                                  True     True    Available   
+│  └─ Release/platform-ref-aws-castai-8jzvs-6c9tv                                     True     True    Available   
+└─ XFlux/platform-ref-aws-castai-8jzvs-99jrm                                          True     True    Available   
+   ├─ Release/platform-ref-aws-castai-8jzvs-7bqhj                                     True     True    Available   
+   └─ Release/platform-ref-aws-castai-8jzvs-8nl8p                                     True     True    Available  
+```
+
+## Questions?
+
+For any questions, thoughts and comments don't hesitate to [reach
+out](https://www.upbound.io/contact) or drop by
+[slack.crossplane.io](https://slack.crossplane.io), and say hi!
\ No newline at end of file
diff --git a/apis/composition.yaml b/apis/composition.yaml
new file mode 100644
index 0000000..8199774
--- /dev/null
+++ b/apis/composition.yaml
@@ -0,0 +1,283 @@
+apiVersion: apiextensions.crossplane.io/v1
+kind: Composition
+metadata:
+  name: xclusters.castai.aws.platformref.upbound.io
+spec:
+  writeConnectionSecretsToNamespace: upbound-system
+  compositeTypeRef:
+    apiVersion: castai.aws.platformref.upbound.io/v1alpha1
+    kind: XCluster
+  mode: Pipeline
+  pipeline:
+    - step: patch-and-transform
+      functionRef:
+        name: upbound-function-patch-and-transform
+      input:
+        apiVersion: pt.fn.crossplane.io/v1beta1
+        kind: Resources
+        resources:
+          - name: XNetworkAWS
+            base:
+              apiVersion: aws.platform.upbound.io/v1alpha1
+              kind: XNetwork
+            patches:
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: spec.parameters.id
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.region
+                toFieldPath: spec.parameters.region
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.deletionPolicy
+                toFieldPath: spec.parameters.deletionPolicy
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.providerConfigName
+                toFieldPath: spec.parameters.providerConfigName
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.networkSelector
+                toFieldPath: spec.compositionSelector.matchLabels[type]
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.subnetIds
+                toFieldPath: status.subnetIds
+                policy:
+                  fromFieldPath: Optional
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.publicSubnetIds
+                toFieldPath: status.castai.publicSubnetIds
+                policy:
+                  fromFieldPath: Optional
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.publicSubnetIds
+                toFieldPath: status.castai.publicSubnetIds
+                policy:
+                  fromFieldPath: Optional
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.vpcId
+                toFieldPath: status.castai.vpcId
+                policy:
+                  fromFieldPath: Optional
+
+          - name: XEKS
+            base:
+              apiVersion: aws.platform.upbound.io/v1alpha1
+              kind: XEKS
+            connectionDetails:
+              - type: FromConnectionSecretKey
+                fromConnectionSecretKey: kubeconfig
+                name: kubeconfig
+            patches:
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: metadata.labels[xeks.aws.platform.upbound.io/cluster-id]
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: spec.parameters.id
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.region
+                toFieldPath: spec.parameters.region
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.deletionPolicy
+                toFieldPath: spec.parameters.deletionPolicy
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.providerConfigName
+                toFieldPath: spec.parameters.providerConfigName
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: metadata.annotations[crossplane.io/external-name]
+              - type: FromCompositeFieldPath
+                fromFieldPath: metadata.uid
+                toFieldPath: spec.writeConnectionSecretToRef.name
+                transforms:
+                  - type: string
+                    string:
+                      fmt: '%s-eks'
+                      type: Format
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.writeConnectionSecretToRef.namespace
+                toFieldPath: spec.writeConnectionSecretToRef.namespace
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.version
+                toFieldPath: spec.parameters.version
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.count
+                toFieldPath: spec.parameters.nodes.count
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.instanceType
+                toFieldPath: spec.parameters.nodes.instanceType
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.iam.roleArn
+                toFieldPath: spec.parameters.iam.roleArn
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.iam.userArn
+                toFieldPath: spec.parameters.iam.userArn
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.eks.accountId
+                toFieldPath: status.castai.accountId
+                policy:
+                  fromFieldPath: Optional
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.eks.clusterSecurityGroupId
+                toFieldPath: status.castai.clusterSecurityGroupId
+                policy:
+                  fromFieldPath: Optional
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.eks.clusterName
+                toFieldPath: status.castai.clusterName
+                policy:
+                  fromFieldPath: Optional
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.instanceProfileRole
+                toFieldPath: spec.parameters.iam.autoscalerArn
+                policy:
+                  fromFieldPath: Optional
+
+          - name: XFlux
+            base:
+              apiVersion: gitops.platform.upbound.io/v1alpha1
+              kind: XFlux
+            patches:
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.deletionPolicy
+                toFieldPath: spec.parameters.deletionPolicy
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: spec.parameters.providerConfigName
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.operators.flux.version
+                toFieldPath: spec.parameters.operators.flux.version
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.operators.flux-sync.version
+                toFieldPath: spec.parameters.operators.flux-sync.version
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.gitops
+                toFieldPath: spec.parameters.source
+
+          - name: usageXEksByXFlux
+            base:
+              apiVersion: apiextensions.crossplane.io/v1alpha1
+              kind: Usage
+              spec:
+                by:
+                  apiVersion: gitops.platform.upbound.io/v1alpha1
+                  kind: XFlux
+                  resourceSelector:
+                    matchControllerRef: true
+                of:
+                  apiVersion: aws.platform.upbound.io/v1alpha1
+                  kind: XEKS
+                  resourceSelector:
+                    matchControllerRef: true
+
+          - name: cluster-readonly-to-fullaccess
+            base:
+              apiVersion: castai.aws.platform.upbound.io/v1alpha1
+              kind: XReadOnly
+            patches:
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.clusterName
+                toFieldPath: spec.parameters.clusterName
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.accountId
+                toFieldPath: spec.parameters.accountId
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.region
+                toFieldPath: spec.parameters.region
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: spec.parameters.id
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: metadata.name
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.deleteNodesOnDisconnect
+                toFieldPath: spec.parameters.deleteNodesOnDisconnect
+
+          - name: usageXEksByXReadOnly
+            base:
+              apiVersion: apiextensions.crossplane.io/v1alpha1
+              kind: Usage
+              spec:
+                by:
+                  apiVersion: castai.aws.platform.upbound.io/v1alpha1
+                  kind: XReadOnly
+                  resourceSelector:
+                    matchControllerRef: true
+                of:
+                  apiVersion: aws.platform.upbound.io/v1alpha1
+                  kind: XEKS
+                  resourceSelector:
+                    matchControllerRef: true
+
+          - name: cluster-fullaccess
+            base:
+              apiVersion: castai.aws.platform.upbound.io/v1alpha1
+              kind: XFullAccess
+            patches:
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.clusterName
+                toFieldPath: spec.parameters.clusterName
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.accountId
+                toFieldPath: spec.parameters.accountId
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.publicSubnetIds
+                toFieldPath: spec.parameters.subnets
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.clusterSecurityGroupId
+                toFieldPath: spec.parameters.securityGroups[0]
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: status.castai.vpcId
+                toFieldPath: spec.parameters.vpc
+                policy:
+                  fromFieldPath: Required
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.region
+                toFieldPath: spec.parameters.region
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: spec.parameters.id
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.id
+                toFieldPath: metadata.name
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.image
+                toFieldPath: spec.parameters.image
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.deleteNodesOnDisconnect
+                toFieldPath: spec.parameters.deleteNodesOnDisconnect
+              - type: FromCompositeFieldPath
+                fromFieldPath: spec.parameters.nodes.autoscalerPolicies
+                toFieldPath: spec.parameters.autoscalerPolicies
+              - type: ToCompositeFieldPath
+                fromFieldPath: status.onboarding.instanceProfileRole
+                toFieldPath: status.castai.instanceProfileRole
+                policy:
+                  fromFieldPath: Optional
+
+          - name: usageXEksByXFullAccess
+            base:
+              apiVersion: apiextensions.crossplane.io/v1alpha1
+              kind: Usage
+              spec:
+                by:
+                  apiVersion: castai.aws.platform.upbound.io/v1alpha1
+                  kind: XFullAccess
+                  resourceSelector:
+                    matchControllerRef: true
+                of:
+                  apiVersion: aws.platform.upbound.io/v1alpha1
+                  kind: XEKS
+                  resourceSelector:
+                    matchControllerRef: true
diff --git a/apis/definition.yaml b/apis/definition.yaml
new file mode 100644
index 0000000..16135e8
--- /dev/null
+++ b/apis/definition.yaml
@@ -0,0 +1,205 @@
+apiVersion: apiextensions.crossplane.io/v1
+kind: CompositeResourceDefinition
+metadata:
+  name: xclusters.castai.aws.platformref.upbound.io
+spec:
+  defaultCompositeDeletePolicy: Foreground
+  group: castai.aws.platformref.upbound.io
+  names:
+    kind: XCluster
+    plural: xclusters
+  claimNames:
+    kind: Cluster
+    plural: clusters
+  connectionSecretKeys:
+    - kubeconfig
+  versions:
+    - name: v1alpha1
+      additionalPrinterColumns:
+        - jsonPath: .spec.compositionRevisionRef.name
+          name: COMPOSITION REVISION
+          type: string
+      served: true
+      referenceable: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                parameters:
+                  type: object
+                  description: Cluster configuration parameters.
+                  properties:
+                    id:
+                      type: string
+                      description: ID of this Cluster that other objects will use to refer to it.
+                    region:
+                      type: string
+                      description: Region is the region you'd like your resource to be created in.
+                    iam:
+                      type: object
+                      description: IAM configuration to connect as ClusterAdmin.
+                      properties:
+                        roleArn:
+                          description: The IAM Role ARN to connect as ClusterAdmin.
+                          type: string
+                        userArn:
+                          description: The IAM User ARN to connect as ClusterAdmin.
+                          type: string
+                    networkSelector:
+                      type: string
+                      description: NetworkSelector employs a specific type of network architecture.
+                      enum:
+                        - basic
+                      default: basic
+                    deletionPolicy:
+                      description: Delete the external resources when the Claim/XR is deleted. Defaults to Delete
+                      enum:
+                        - Delete
+                        - Orphan
+                      type: string
+                      default: Delete
+                    providerConfigName:
+                      description: Crossplane ProviderConfig to use for provisioning this resources
+                      type: string
+                      default: default
+                    version:
+                      type: string
+                      description: Kubernetes version of the Cluster
+                    nodes:
+                      type: object
+                      description: Cluster node configuration parameters for default nodegroup.
+                      properties:
+                        count:
+                          type: integer
+                          description: Desired node count, from 1 to 100.
+                        instanceType:
+                          type: string
+                          description: instance types associated with the Node Group.
+                        image:
+                          type: string
+                          description: The base image for CASTAI nodes.
+                        deleteNodesOnDisconnect:
+                          type: boolean
+                          description: "Delete Nodes on Disconnect"
+                          default: false
+                        autoscalerPolicies:
+                          type: string
+                          description: "Autoscaler Policies for this Cluster"
+                      required:
+                        - count
+                        - instanceType
+                        - image
+                        - deleteNodesOnDisconnect
+                    operators:
+                      description: Configuration for operators.
+                      type: object
+                      default:
+                        flux:
+                          version: "2.10.6"
+                        flux-sync:
+                          version: "1.7.2"
+                        prometheus:
+                          version: "52.1.0"
+                      properties:
+                        flux:
+                          description: Configuration for the Flux GitOps operator.
+                          type: object
+                          properties:
+                            version:
+                              description: flux helm-chart version to run.
+                              type: string
+                              default: "2.10.6"
+                          required:
+                            - version
+                        flux-sync:
+                          description: Configuration for the Flux Sync Helm-Chart.
+                          type: object
+                          properties:
+                            version:
+                              description: flux sync helm-chart version to run.
+                              type: string
+                              default: "1.7.2"
+                          required:
+                            - version
+                        prometheus:
+                          description: Configuration for the Prometheus Helm-Chart.
+                          type: object
+                          properties:
+                            version:
+                              description: prometheus helm-chart version to run.
+                              type: string
+                              default: "52.1.0"
+                          required:
+                            - version
+                    gitops:
+                      description: GitOps configure gitops system
+                      type: object
+                      properties:
+                        git:
+                          type: object
+                          properties:
+                            interval:
+                              default: "5m0s"
+                              description: Interval at which the GitRepository URL is checked for
+                                updates. This interval is approximate and may be subject to jitter
+                                to ensure efficient use of resources.
+                              pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$
+                              type: string
+                            timeout:
+                              default: "60s"
+                              description: Timeout for Git operations like cloning, defaults to
+                                60s.
+                              pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$
+                              type: string
+                            url:
+                              description: URL specifies the Git repository URL, it can be an HTTP/S
+                                or SSH address.
+                              pattern: ^(http|https|ssh)://.*$
+                              type: string
+                            path:
+                              type: string
+                              default: "/"
+                            ref:
+                              description: Reference specifies the Git reference to resolve and
+                                monitor for changes.
+                              type: object
+                              properties:
+                                name:
+                                  description: "Name of the reference to check out; takes precedence
+                                    over Branch, Tag and SemVer. \n It must be a valid Git reference:
+                                    https://git-scm.com/docs/git-check-ref-format#_description Examples:
+                                    \"refs/heads/main\", \"refs/tags/v0.1.0\", \"refs/pull/420/head\",
+                                    \"refs/merge-requests/1/head\""
+                                  type: string
+                          required:
+                            - interval
+                            - timeout
+                            - url
+                            - path
+                            - ref
+                      required:
+                        - git
+                  required:
+                    - deletionPolicy
+                    - gitops
+                    - id
+                    - nodes
+                    - operators
+                    - providerConfigName
+                    - region
+              required:
+                - parameters
+            status:
+              type: object
+              properties:
+                subnetIds:
+                  type: array
+                  items:
+                    type: string
+                castai:
+                  description: Freeform field containing status information for castai
+                  type: object
+                  x-kubernetes-preserve-unknown-fields: true
diff --git a/crossplane.yaml b/crossplane.yaml
index ee43d2b..2d13009 100644
--- a/crossplane.yaml
+++ b/crossplane.yaml
@@ -35,4 +35,7 @@ spec:
       version: "v0.7.0"
     - configuration: xpkg.upbound.io/upbound/configuration-aws-eks-castai
       # renovate: datasource=github-releases depName=upbound/configuration-aws-eks-castai
-      version: "v0.1.0"
+      version: "v0.3.0"
+    - configuration: xpkg.upbound.io/upbound/configuration-gitops-flux
+      # renovate: datasource=github-releases depName=upbound/configuration-gitops-flux
+      version: "v0.2.0"
diff --git a/examples/castai-default-provider.yaml b/examples/castai-default-provider.yaml
new file mode 100644
index 0000000..2ea51f9
--- /dev/null
+++ b/examples/castai-default-provider.yaml
@@ -0,0 +1,11 @@
+apiVersion: castai.upbound.io/v1beta1
+kind: ProviderConfig
+metadata:
+  name: default
+spec:
+  credentials:
+    source: Secret
+    secretRef:
+      namespace: upbound-system
+      name: castai-creds
+      key: credentials
diff --git a/examples/cluster.yaml b/examples/cluster.yaml
new file mode 100644
index 0000000..ff528fd
--- /dev/null
+++ b/examples/cluster.yaml
@@ -0,0 +1,37 @@
+apiVersion: castai.aws.platformref.upbound.io/v1alpha1
+kind: Cluster
+metadata:
+  name: platform-ref-aws-castai
+  namespace: default
+spec:
+  compositeDeletePolicy: Foreground
+  parameters:
+    id: platform-ref-aws-castai
+    region: us-west-2
+    version: "1.27"
+    iam:
+      # Important: Please specify an iamRoleArn to access the AWS EKS Cluster deployed as part of CNOE.
+      # Without specifying a valid roleArn, you will not be able to log in to the EKS cluster.
+      # If you are using AWS SSO Roles, ensure to remove 'aws-reserved/sso.amazonaws.com/' from the ARN.
+      # For example, convert this:
+      #   arn:aws:iam::123456789:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AdministratorAccess_d703c73ed340fde7
+      # To this:
+      #   arn:aws:iam::123456789:role/AWSReservedSSO_AdministratorAccess_d703c73ed340fde7
+      # roleArn: arn:aws:iam::123456789:role/AWSReservedSSO_AdministratorAccess_d703c73ed340fde7
+      roleArn: ${data.aws_eks_iam_default_admin}
+    nodes:
+      count: 3 
+      instanceType: t3.small
+      image: bottlerocket-aws-k8s-1.27-x86_64*
+      deleteNodesOnDisconnect: true
+    gitops:
+      git:
+        url: https://github.com/upbound/platform-ref-aws-castai/
+        ref:
+          # refs/heads/main
+          # refs/tags/v0.1.0
+          # refs/pull/420/head
+          # refs/merge-requests/1/head
+          name: refs/heads/main
+  writeConnectionSecretToRef:
+    name: platform-ref-aws-castai-kubeconfig