fix: add namespace to remaining poddisruptionbudget helm templates

[somaz94]

The PodDisruptionBudget templates for kratos, hydra-maester, and
oathkeeper-maester don't set metadata.namespace, so the PDB doesn't
inherit the release namespace. This completes the same fix already
merged for hydra (#885) and in progress for oathkeeper (#883); keto
already has it.

Same guard as #885:

  {{- if .Release.Namespace }}
  namespace: {{ .Release.Namespace }}
  {{- end }}

Validation:

• helm template on all three charts with pdb.enabled=true renders
  namespace: <release-namespace> on the PDB.
• default render is unchanged; the only delta vs master is the added
  namespace line.

related: #882, #884

Summary by CodeRabbit

• Bug Fixes
  • PodDisruptionBudget resources now include the release namespace when one is provided, improving chart rendering consistency across deployments.
  • Applied the same namespace handling across all affected charts to reduce surprises during installation or upgrade.

[CLAassistant]

All committers have signed the CLA.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4c0e3eb5-af49-4dd6-b9db-741cf3097238

📥 Commits

Reviewing files that changed from the base of the PR and between 4de8d62 and 312afe1.

📒 Files selected for processing (3)

• helm/charts/hydra-maester/templates/pdb.yaml
• helm/charts/kratos/templates/pdb.yaml
• helm/charts/oathkeeper-maester/templates/pdb.yaml

---

📝 Walkthrough

Walkthrough

Three Helm chart PodDisruptionBudget templates (hydra-maester, kratos, oathkeeper-maester) are updated so metadata.namespace is conditionally rendered from .Release.Namespace when that value is set.

Changes

PDB Namespace Conditional Rendering

Layer / File(s)	Summary
Conditional metadata.namespace in PDB templates helm/charts/hydra-maester/templates/pdb.yaml, helm/charts/kratos/templates/pdb.yaml, helm/charts/oathkeeper-maester/templates/pdb.yaml	Each template wraps a namespace: {{ .Release.Namespace }} line in an if/end block so metadata.namespace is only rendered when .Release.Namespace is set.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related issues

• hydra PodDisruptionBudget helm template is missing namespace metadata #884: Applies the same metadata.namespace fix pattern to other PodDisruptionBudget Helm templates, directly matching this PR's changes.

Possibly related PRs

• ory/k8s#874: Applies the same conditional metadata.namespace from .Release.Namespace pattern to hydra-maester's deployment.yaml.
• ory/k8s#885: Modifies a PodDisruptionBudget template to conditionally render metadata.namespace from .Release.Namespace.

Suggested reviewers: piotrmsc, Demonsthere

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding namespace handling to the remaining PodDisruptionBudget Helm templates.
Description check	✅ Passed	The description explains the fix, links related issues, and includes validation notes; only non-critical template sections are left empty.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[somaz94]

Hi @Demonsthere — friendly ping on this one.

All checks are green and there are no conflicts. This is the follow-up to #885 (hydra), covering the remaining charts that still template a PodDisruptionBudget without a namespace: hydra-maester, kratos and oathkeeper-maester. It does not overlap with #885 or with the open #883.

Happy to rebase or split it up if that would help. Thanks!

[Demonsthere]

Hi there!
Sorry for the delay on this 😞