From 92e80a761ccc27d5ddbf7c256a61e22f386589eb Mon Sep 17 00:00:00 2001
From: Sienna Meridian Satterwhite <sienna@r3t.io>
Date: Sat, 28 Feb 2026 14:02:47 +0000
Subject: [PATCH] fix(ory): re-enable hydra-maester, fix namespace, add memory
 limit

---
 base/ory/hydra-values.yaml           |  5 -----
 base/ory/kustomization.yaml          | 10 ++++++++++
 overlays/local/values-resources.yaml | 15 +++++++++++++++
 3 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/base/ory/hydra-values.yaml b/base/ory/hydra-values.yaml
index d6850e4..cf10515 100644
--- a/base/ory/hydra-values.yaml
+++ b/base/ory/hydra-values.yaml
@@ -2,11 +2,6 @@
 # DOMAIN_SUFFIX is replaced by overlay patches.
 # DSN and system secrets come from the overlay-specific Secret.
 
-# Disable the maester controller — it manages OAuth2Client CRDs which we don't use locally.
-# OAuth2 clients are registered directly via the Hydra admin API.
-maester:
-  enabled: false
-
 hydra:
   config:
     dsn: "postgresql://hydra:$(HYDRA_DB_PASSWORD)@postgres-rw.data.svc.cluster.local:5432/hydra_db"
diff --git a/base/ory/kustomization.yaml b/base/ory/kustomization.yaml
index e55d81f..6ee4e74 100644
--- a/base/ory/kustomization.yaml
+++ b/base/ory/kustomization.yaml
@@ -7,6 +7,16 @@ resources:
   - namespace.yaml
   - login-ui-deployment.yaml
 
+# The hydra-maester sub-chart does not set .Release.Namespace in its Deployment template.
+patches:
+  - patch: |
+      - op: add
+        path: /metadata/namespace
+        value: ory
+    target:
+      kind: Deployment
+      name: hydra-hydra-maester
+
 helmCharts:
   # helm repo add ory https://k8s.ory.sh/helm/charts
   - name: kratos
diff --git a/overlays/local/values-resources.yaml b/overlays/local/values-resources.yaml
index 5c65989..feaa941 100644
--- a/overlays/local/values-resources.yaml
+++ b/overlays/local/values-resources.yaml
@@ -93,6 +93,21 @@ spec:
             limits:
               memory: 256Mi
 
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hydra-hydra-maester
+  namespace: ory
+spec:
+  template:
+    spec:
+      containers:
+        - name: hydra-maester
+          resources:
+            limits:
+              memory: 64Mi
+
 ---
 apiVersion: apps/v1
 kind: Deployment