diff --git a/api/v1alpha1/oauth2client_types.go b/api/v1alpha1/oauth2client_types.go
index 9c83269..5da7aaa 100644
--- a/api/v1alpha1/oauth2client_types.go
+++ b/api/v1alpha1/oauth2client_types.go
@@ -122,6 +122,8 @@ type OAuth2ClientSpec struct {
 	TokenEndpointAuthMethod TokenEndpointAuthMethod `json:"tokenEndpointAuthMethod,omitempty"`
 
 	// +kubebuilder:validation:Type=object
+	// +nullable
+	// +optional
 	//
 	// Metadata is abritrary data
 	Metadata apiextensionsv1.JSON `json:"metadata,omitempty"`
diff --git a/config/crd/bases/hydra.ory.sh_oauth2clients.yaml b/config/crd/bases/hydra.ory.sh_oauth2clients.yaml
index d1d8dfc..316fd28 100644
--- a/config/crd/bases/hydra.ory.sh_oauth2clients.yaml
+++ b/config/crd/bases/hydra.ory.sh_oauth2clients.yaml
@@ -99,6 +99,7 @@ spec:
                 type: object
               metadata:
                 description: Metadata is abritrary data
+                nullable: true
                 type: object
                 x-kubernetes-preserve-unknown-fields: true
               postLogoutRedirectUris: