feat: use hydra-maester fork

see https://github.com/ory/hydra-maester/issues/151

components/oidc-test/resources/oauth2-client.yaml

@@ -16,3 +16,4 @@ spec:
     - https://example.net/oauth2/callback
   postLogoutRedirectUris:
     - https://example.net
+  userInfoSignedResponseAlg: "RS256"

components/redis/configurations/redis-conf.yaml

@@ -0,0 +1,5 @@
+nameReference:
+  - kind: ConfigMap
+    fieldSpecs:
+      - kind: Redis
+        path: spec/redisConfig/additionalRedisConfig

components/redis/files/redis-additional.conf

@@ -0,0 +1,3 @@
+maxmemory-policy allkeys-lru
+maxmemory 1536mb
+tcp-keepalive 90

components/redis/kustomization.yaml

@@ -1,9 +1,17 @@
 apiVersion: kustomize.config.k8s.io/v1alpha1
 kind: Component
 
+configurations:
+  - ./configurations/redis-conf.yaml
+
 resources:
   - ./resources/redis-sso.yaml
 
+configMapGenerator:
+- name: redis-sso-extra-conf
+  files:
+    - ./files/redis-additional.conf
+
 patches:
   - path: ./patches/hydra-apps.yaml
     target:

components/redis/resources/redis-sso.yaml

@@ -6,6 +6,15 @@ spec:
   kubernetesConfig:
     image: reg.cadoles.com/quay/opstree/redis:v7.0.15
     imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 500m
+        memory: 1024Mi
+      limits:
+        cpu: 2000m
+        memory: 2048Mi
+  redisConfig:
+    additionalRedisConfig: redis-sso-extra-conf
   storage:
     volumeClaimTemplate:
       spec:
@@ -16,4 +25,3 @@ spec:
             storage: 1Gi
   securityContext:
     runAsUser: 1000
-    fsGroup: 1000

examples/k8s/kind/cluster/kustomization.yaml

@@ -1,11 +1,12 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - https://forge.cadoles.com/CadolesKube/c-kustom//crds?ref=develop
+  - https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.31.0/crds.yaml
   - https://github.com/cert-manager/cert-manager/releases/download/v1.10.0/cert-manager.yaml
   - ./resources/olm
   - https://forge.cadoles.com/CadolesKube/c-kustom//base/cloudnative-pg-operator?ref=develop
   - https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+  - https://forge.cadoles.com/CadolesKube/hydra-maester//config/crd?ref=issue-151
 
 patches:
   - path: patches/nginx-controller.yaml

resources/hydra/resources/hydra-maester/resources/hydra-maester-deployment.yaml

@@ -26,7 +26,7 @@ spec:
     spec:
       containers:
         - name: hydra-maester
-          image: reg.cadoles.com/proxy_cache/oryd/hydra-maester:v0.0.25
+          image: reg.cadoles.com/wpetit/hydra-maester:latest
           imagePullPolicy: IfNotPresent
           envFrom:
             - configMapRef: