From 5ebf2cc581b272c663fa0b90a56b9ac34bc012fe Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 8 Aug 2026 22:21:36 +1000 Subject: [PATCH] Bump kea images to v0.1.2 (socket dir 0750 fix) (#343) ## Why kea-dhcp4 and kea-ctrl-agent crash-loop because kea 2.6.5 refuses a unix-socket directory more relaxed than 0750, but the operator's shared emptyDir mounts `/var/run/kea` at 0777 (`'socket-name' is invalid: socket path:/var/run/kea ... more relaxed permissions than 750`). kea-operator v0.1.2 renders entrypoints that tighten it. ## How - bump kea-operator, kea, and kea-api images to v0.1.2 --------- Co-authored-by: Ben Vincent Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/343 Co-authored-by: Ben Vincent Co-committed-by: Ben Vincent --- apps/base/dhcp-system/cr/keaapi.yaml | 2 +- apps/base/dhcp-system/cr/keacluster.yaml | 2 +- apps/base/dhcp-system/deployment.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/apps/base/dhcp-system/cr/keaapi.yaml b/apps/base/dhcp-system/cr/keaapi.yaml index d2c7b7a..8977023 100644 --- a/apps/base/dhcp-system/cr/keaapi.yaml +++ b/apps/base/dhcp-system/cr/keaapi.yaml @@ -11,7 +11,7 @@ metadata: argocd.argoproj.io/sync-wave: "1" spec: replicas: 1 - image: git.unkin.net/unkin/kea-api:v0.1.1 + image: git.unkin.net/unkin/kea-api:v0.1.2 tokenSecretName: kea-api-token service: type: ClusterIP diff --git a/apps/base/dhcp-system/cr/keacluster.yaml b/apps/base/dhcp-system/cr/keacluster.yaml index 3b1ce73..76b6114 100644 --- a/apps/base/dhcp-system/cr/keacluster.yaml +++ b/apps/base/dhcp-system/cr/keacluster.yaml @@ -11,7 +11,7 @@ metadata: argocd.argoproj.io/sync-wave: "1" spec: replicas: 2 - image: git.unkin.net/unkin/kea:v0.1.1 + image: git.unkin.net/unkin/kea:v0.1.2 domainName: main.unkin.net defaultLeaseTime: 1200 maxLeaseTime: 86400 diff --git a/apps/base/dhcp-system/deployment.yaml b/apps/base/dhcp-system/deployment.yaml index 2f75c40..9063426 100644 --- a/apps/base/dhcp-system/deployment.yaml +++ b/apps/base/dhcp-system/deployment.yaml @@ -21,7 +21,7 @@ spec: runAsNonRoot: true containers: - name: operator - image: git.unkin.net/unkin/kea-operator:v0.1.1 + image: git.unkin.net/unkin/kea-operator:v0.1.2 args: - --metrics-bind-address=:8080 - --health-probe-bind-address=:8081