diff --git a/src/test/ks-core/Chart.yaml b/src/test/ks-core/Chart.yaml
index b46e0e8e..ca18c2e6 100644
--- a/src/test/ks-core/Chart.yaml
+++ b/src/test/ks-core/Chart.yaml
@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.6.6
+version: 0.6.7
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/src/test/ks-core/crds/application.kubesphere.io_applications.yaml b/src/test/ks-core/crds/application.kubesphere.io_applications.yaml
index 75fdafda..1cd42508 100644
--- a/src/test/ks-core/crds/application.kubesphere.io_applications.yaml
+++ b/src/test/ks-core/crds/application.kubesphere.io_applications.yaml
@@ -63,6 +63,19 @@ spec:
                 type: array
               icon:
                 type: string
+              resources:
+                items:
+                  properties:
+                    Group:
+                      type: string
+                    Kind:
+                      type: string
+                    Resource:
+                      type: string
+                    Version:
+                      type: string
+                  type: object
+                type: array
             type: object
           status:
             description: ApplicationStatus defines the observed state of Application
diff --git a/src/test/ks-core/crds/application.kubesphere.io_repos.yaml b/src/test/ks-core/crds/application.kubesphere.io_repos.yaml
index 36e39144..cf1e6e25 100644
--- a/src/test/ks-core/crds/application.kubesphere.io_repos.yaml
+++ b/src/test/ks-core/crds/application.kubesphere.io_repos.yaml
@@ -55,7 +55,6 @@ spec:
             description: RepoSpec defines the desired state of Repo
             properties:
               credential:
-                description: ' repo credential'
                 properties:
                   caFile:
                     description: verify certificates of HTTPS-enabled servers using
@@ -80,14 +79,12 @@ spec:
                     type: string
                 type: object
               description:
-                description: chart repo description from frontend
                 type: string
+              global:
+                type: boolean
               syncPeriod:
-                description: sync period in seconds, no sync when SyncPeriod=0, the
-                  minimum SyncPeriod is 180s
                 type: integer
               url:
-                description: ' repo url'
                 type: string
             required:
             - url
diff --git a/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml b/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
index 29493883..1fa7c4c5 100644
--- a/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
+++ b/src/test/ks-core/crds/kubesphere.io_extensionversions.yaml
@@ -82,8 +82,6 @@ spec:
                 additionalProperties:
                   type: string
                 type: object
-              docs:
-                type: string
               externalDependencies:
                 description: ExternalDependencies
                 items:
diff --git a/src/test/ks-core/templates/customresourcefilters.yaml b/src/test/ks-core/templates/customresourcefilters.yaml
new file mode 100644
index 00000000..a84a033c
--- /dev/null
+++ b/src/test/ks-core/templates/customresourcefilters.yaml
@@ -0,0 +1,41 @@
+apiVersion: v1
+stringData:
+  configuration.yaml: |
+    resource:
+      group: "kubesphere.io"
+      version: "v1alpha1"
+      kind: "Extension"
+    regoPolicy: |
+      package filter
+
+      import rego.v1
+
+      default match := false
+
+      match if {
+      	listAvailableExtension
+      	isSubscribed
+      }
+
+      match if {
+      	listAvailableExtension
+      	isInstalled
+      }
+
+      match if {
+      	listAvailableExtension
+      	not hasExtensionID
+      }
+
+      listAvailableExtension if ["available"][_] == input.filter.field
+
+      isSubscribed if input.object.metadata.labels["marketplace.kubesphere.io/subscribed"] == "true"
+
+      isInstalled if input.object.status.state != ""
+
+      hasExtensionID if input.object.metadata.labels["marketplace.kubesphere.io/extension-id"] != ""
+kind: Secret
+metadata:
+  name: extensions.customresourcefilters.kubesphere
+  namespace: kubesphere-system
+type: config.kubesphere.io/custom-resource-filter
\ No newline at end of file
diff --git a/src/test/ks-core/templates/globalroles.yaml b/src/test/ks-core/templates/globalroles.yaml
index aca0109c..8b064670 100644
--- a/src/test/ks-core/templates/globalroles.yaml
+++ b/src/test/ks-core/templates/globalroles.yaml
@@ -129,13 +129,6 @@ rules:
     verbs:
       - get
       - list
-  - apiGroups:
-      - license.kubesphere.io
-    resources:
-      - licenses
-    verbs:
-      - get
-      - list
   - apiGroups:
       - cluster.kubesphere.io
     resources:
diff --git a/src/test/ks-core/templates/webhook.yaml b/src/test/ks-core/templates/webhook.yaml
index 0fd1e180..a9021abd 100644
--- a/src/test/ks-core/templates/webhook.yaml
+++ b/src/test/ks-core/templates/webhook.yaml
@@ -317,38 +317,6 @@ webhooks:
 
 ---
 apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: license.kubesphere.io
-webhooks:
-  - admissionReviewVersions:
-      - v1
-    clientConfig:
-      caBundle: {{ b64enc $ca.Cert | quote }}
-      service:
-        name: ks-controller-manager
-        namespace: kubesphere-system
-        path: /license-cluster-checker
-        port: 443
-    name: license-cluster-checker.kubesphere.io
-    failurePolicy: Ignore
-    matchPolicy: Exact
-    namespaceSelector: {}
-    objectSelector: {}
-    rules:
-      - apiGroups:
-          - cluster.kubesphere.io
-        apiVersions:
-          - v1alpha1
-        operations:
-          - CREATE
-        resources:
-          - clusters
-        scope: '*'
-    sideEffects: None
-    timeoutSeconds: 30
----
-apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata:
   name: defaulter.config.kubesphere.io