---
# HA pair fronted by a PureLB anycast Service on a NEW, unused common-pool IP
# (198.18.200.10). This is intentionally NOT the current isc-dhcpd anycast
# address (198.18.19.18) -- the production cutover is a separate later task.
apiVersion: kea.unkin.net/v1alpha1
kind: KeaCluster
metadata:
  name: kea
  namespace: dhcp-system
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  replicas: 2
  image: git.unkin.net/unkin/kea:v0.1.1
  domainName: main.unkin.net
  defaultLeaseTime: 1200
  maxLeaseTime: 86400
  # No ntpServers: DHCP option 42 (ntp-servers) carries IPv4 addresses only, so
  # the rotating AU pool.ntp.org hostnames cannot be delivered this way (kea
  # rejects them at config load). Add concrete NTP server IPs here if needed.
  ha:
    mode: hot-standby
  service:
    type: LoadBalancer
    ipAddressPool: common
    loadBalancerIP: 198.18.200.10
    annotations:
      purelb.io/addresses: 198.18.200.10
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: "1"
      memory: 512Mi