Fix kea CrashLoopBackOff: drop DHCP ntp hostnames, bump to v0.1.1 (#338)

kea-0/kea-1 crash-looped after the dhcp-system deploy. Two root causes:

1. **kea-dhcp4** rejected the `ntp-servers` option (DHCP code 42) because that option carries IPv4 addresses only, but the KeaCluster supplied rotating `pool.ntp.org` hostnames (`DHCP4_CONFIG_LOAD_FAIL ... Failed to convert string to address '0.au.pool.ntp.org'`).
2. **kea-ctrl-agent/dhcp4** rejected the `/run/kea` unix socket path — kea 2.6.5 permits only `/var/run/kea` (exact-string check). Fixed in kea-operator v0.1.1 (`RunDir=/var/run/kea`).

- Remove `ntpServers` from the KeaCluster (not representable via DHCP option 42; add concrete NTP server IPs if ever needed).
- Bump kea-operator, kea, and kea-api images v0.1.0 -> v0.1.1 (socket-path fix).

kubeconform + pre-commit green.

https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
---------

Co-authored-by: Ben Vincent <neotheo@gmail.com>
Reviewed-on: #338
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
This commit was merged in pull request #338.
This commit is contained in:
2026-08-08 18:28:41 +10:00
committed by BenVincent
parent b99682861b
commit ca5e29e685
3 changed files with 6 additions and 8 deletions
+1 -1
View File
@@ -11,7 +11,7 @@ metadata:
argocd.argoproj.io/sync-wave: "1" argocd.argoproj.io/sync-wave: "1"
spec: spec:
replicas: 1 replicas: 1
image: git.unkin.net/unkin/kea-api:v0.1.0 image: git.unkin.net/unkin/kea-api:v0.1.1
tokenSecretName: kea-api-token tokenSecretName: kea-api-token
service: service:
type: ClusterIP type: ClusterIP
+4 -6
View File
@@ -11,15 +11,13 @@ metadata:
argocd.argoproj.io/sync-wave: "1" argocd.argoproj.io/sync-wave: "1"
spec: spec:
replicas: 2 replicas: 2
image: git.unkin.net/unkin/kea:v0.1.0 image: git.unkin.net/unkin/kea:v0.1.1
domainName: main.unkin.net domainName: main.unkin.net
defaultLeaseTime: 1200 defaultLeaseTime: 1200
maxLeaseTime: 86400 maxLeaseTime: 86400
ntpServers: # No ntpServers: DHCP option 42 (ntp-servers) carries IPv4 addresses only, so
- 0.au.pool.ntp.org # the rotating AU pool.ntp.org hostnames cannot be delivered this way (kea
- 1.au.pool.ntp.org # rejects them at config load). Add concrete NTP server IPs here if needed.
- 2.au.pool.ntp.org
- 3.au.pool.ntp.org
ha: ha:
mode: hot-standby mode: hot-standby
service: service:
+1 -1
View File
@@ -21,7 +21,7 @@ spec:
runAsNonRoot: true runAsNonRoot: true
containers: containers:
- name: operator - name: operator
image: git.unkin.net/unkin/kea-operator:v0.1.0 image: git.unkin.net/unkin/kea-operator:v0.1.1
args: args:
- --metrics-bind-address=:8080 - --metrics-bind-address=:8080
- --health-probe-bind-address=:8081 - --health-probe-bind-address=:8081