Fix kea CrashLoopBackOff: drop undeliverable DHCP ntp hostnames, bump to v0.1.1
ci/woodpecker/pr/vector-test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful

kea-0/kea-1 crash-looped after the dhcp-system deploy. Two causes:
1) kea-dhcp4 rejected the ntp-servers option (code 42) because DHCP option 42 carries IPv4 addresses only, but the CR supplied rotating pool.ntp.org hostnames.
2) kea-ctrl-agent/dhcp4 rejected the /run/kea unix socket path (kea 2.6.5 permits only /var/run/kea) -- fixed in kea-operator v0.1.1.

- Remove ntpServers from the KeaCluster (not representable via DHCP option 42).
- Bump kea-operator, kea, and kea-api images to v0.1.1 (socket-path fix).

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
This commit is contained in:
Ben Vincent
2026-08-06 23:41:18 +10:00
parent 2360534a38
commit ad985a5a13
3 changed files with 6 additions and 8 deletions
+1 -1
View File
@@ -11,7 +11,7 @@ metadata:
argocd.argoproj.io/sync-wave: "1"
spec:
replicas: 1
image: git.unkin.net/unkin/kea-api:v0.1.0
image: git.unkin.net/unkin/kea-api:v0.1.1
tokenSecretName: kea-api-token
service:
type: ClusterIP
+4 -6
View File
@@ -11,15 +11,13 @@ metadata:
argocd.argoproj.io/sync-wave: "1"
spec:
replicas: 2
image: git.unkin.net/unkin/kea:v0.1.0
image: git.unkin.net/unkin/kea:v0.1.1
domainName: main.unkin.net
defaultLeaseTime: 1200
maxLeaseTime: 86400
ntpServers:
- 0.au.pool.ntp.org
- 1.au.pool.ntp.org
- 2.au.pool.ntp.org
- 3.au.pool.ntp.org
# No ntpServers: DHCP option 42 (ntp-servers) carries IPv4 addresses only, so
# the rotating AU pool.ntp.org hostnames cannot be delivered this way (kea
# rejects them at config load). Add concrete NTP server IPs here if needed.
ha:
mode: hot-standby
service:
+1 -1
View File
@@ -21,7 +21,7 @@ spec:
runAsNonRoot: true
containers:
- name: operator
image: git.unkin.net/unkin/kea-operator:v0.1.0
image: git.unkin.net/unkin/kea-operator:v0.1.1
args:
- --metrics-bind-address=:8080
- --health-probe-bind-address=:8081