---
# Terraform-friendly REST API for KeaSubnet/KeaClientClass CRUD. The bearer
# token Secret is generated by the operator when absent (no plain Secret is
# committed here); it can later be pre-seeded from Vault under the same name.
apiVersion: kea.unkin.net/v1alpha1
kind: KeaAPI
metadata:
  name: kea-api
  namespace: dhcp-system
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  replicas: 1
  image: git.unkin.net/unkin/kea-api:v0.1.0
  tokenSecretName: kea-api-token
  service:
    type: ClusterIP
    port: 8080
  resources:
    requests:
      cpu: 100m
      memory: 64Mi
    limits:
      cpu: "1"
      memory: 256Mi