# The following patch adds a directive for certmanager to inject CA into the CRD # CRD conversion requires k8s 1.13 or later. apiVersion: apiextensions.k8s.io/v1beta1 kind: CustomResourceDefinition metadata: annotations: certmanager.k8s.io/inject-ca-from: $(NAMESPACE)/$(CERTIFICATENAME) name: oauth2clients.hydra.ory.sh