fix(maester): CRD must be installed cluster wide

This reverts commit 1fccf5f8dc.

components/hydra-ldap/resources/deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: hydra-ldap
-  namespace: default
   labels:
     app.kubernetes.io/name: hydra-ldap
     app.kubernetes.io/version: "v1.2.2"
@@ -18,34 +17,34 @@ spec:
         app.kubernetes.io/version: "v1.2.2"
     spec:
       containers:
-        - name: werther
+      - name: werther
-          image: reg.cadoles.com/cadoles/hydra-werther:2023.12.6-stable.1421.15a4717
+        image: reg.cadoles.com/cadoles/hydra-werther:2023.12.6-stable.1421.15a4717
-          imagePullPolicy: IfNotPresent
+        imagePullPolicy: IfNotPresent
-          envFrom:
+        envFrom:
-            - configMapRef:
+        - configMapRef:
-                name: hydra-ldap-env
+            name: hydra-ldap-env
-          env:
+        env:
-            - name: WERTHER_WEB_DIR
+        - name: WERTHER_WEB_DIR
-              value: "/usr/share/werther/login/"
+          value: "/usr/share/werther/login/"
-            - name: WERTHER_LDAP_BINDDN
+        - name: WERTHER_LDAP_BINDDN
-              valueFrom:
+          valueFrom:
-                secretKeyRef:
+            secretKeyRef:
-                  name: hydra-ldap-sc
+              name: hydra-ldap-sc
-                  key: WERTHER_LDAP_BINDDN
+              key: WERTHER_LDAP_BINDDN
-            - name: WERTHER_LDAP_BINDPW
+        - name: WERTHER_LDAP_BINDPW
-              valueFrom:
+          valueFrom:
-                secretKeyRef:
+            secretKeyRef:
-                  name: hydra-ldap-sc
+              name: hydra-ldap-sc
-                  key: WERTHER_LDAP_BINDPW
+              key: WERTHER_LDAP_BINDPW
-          ports:
+        ports:
-            - containerPort: 8080
+        - containerPort: 8080
-              name: hydra-ldap-http
+          name: hydra-ldap-http
-          securityContext:
+        securityContext:
-            allowPrivilegeEscalation: false
+          allowPrivilegeEscalation: false
-            capabilities:
+          capabilities:
-              drop:
+            drop:
-                - ALL
+            - ALL
-            privileged: false
+          privileged: false
-            readOnlyRootFilesystem: true
+          readOnlyRootFilesystem: true
-            runAsNonRoot: true
+          runAsNonRoot: true
-            runAsUser: 100
+          runAsUser: 100

resources/hydra/resources/hydra-maester/kustomization.yaml

@@ -2,14 +2,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - ./resources/hydra-maester-deployment.yaml
+- ./resources/hydra-maester-deployment.yaml
-  - ./resources/hydra-maester-rbac.yaml
+- ./resources/hydra-maester-rbac.yaml
-  - https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
 
 configMapGenerator:
-  - name: hydra-maester-env
+- name: hydra-maester-env
-    literals:
+  literals:
-      - APP_ENV=prod
+  - APP_ENV=prod
-      - APP_DEBUG=false
+  - APP_DEBUG=false
-      - HYDRA_ADMIN_BASE_URL=http://hydra
+  - HYDRA_ADMIN_BASE_URL=http://hydra
-      - HYDRA_ADMIN_PORT=4445
+  - HYDRA_ADMIN_PORT=4445