Fix authentik cert ns

apps/postgres/ca.yaml

@@ -2,7 +2,8 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: postgres-ca
-  namespace: postgres
+  # cert needs to be on the cluster's default resource ns aka cert-manager by default
+  namespace: cert-manager
 spec:
   isCA: true
   commonName: postgres-ca
@@ -16,7 +17,7 @@ spec:
     group: cert-manager.io
 ---
 apiVersion: cert-manager.io/v1
-kind: Issuer
+kind: ClusterIssuer
 metadata:
   name: postgres-ca
   namespace: postgres

apps/postgres/certs.yaml

@@ -22,7 +22,7 @@ spec:
    - postgres-cluster-ro.postgres.svc
   issuerRef:
     name: postgres-ca
-    kind: Issuer
+    kind: ClusterIssuer
     group: cert-manager.io
 ---
 apiVersion: cert-manager.io/v1
@@ -36,5 +36,5 @@ spec:
   commonName: streaming_replica
   issuerRef:
     name: postgres-ca
-    kind: Issuer
+    kind: ClusterIssuer
     group: cert-manager.io