unkinben
5ebf2cc581
## Why kea-dhcp4 and kea-ctrl-agent crash-loop because kea 2.6.5 refuses a unix-socket directory more relaxed than 0750, but the operator's shared emptyDir mounts `/var/run/kea` at 0777 (`'socket-name' is invalid: socket path:/var/run/kea ... more relaxed permissions than 750`). kea-operator v0.1.2 renders entrypoints that tighten it. ## How - bump kea-operator, kea, and kea-api images to v0.1.2 --------- Co-authored-by: Ben Vincent <neotheo@gmail.com> Reviewed-on: #343 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>
26 lines
638 B
YAML
26 lines
638 B
YAML
---
|
|
# Terraform-friendly REST API for KeaSubnet/KeaClientClass CRUD. The bearer
|
|
# token Secret is generated by the operator when absent (no plain Secret is
|
|
# committed here); it can later be pre-seeded from Vault under the same name.
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaAPI
|
|
metadata:
|
|
name: kea-api
|
|
namespace: dhcp-system
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
replicas: 1
|
|
image: git.unkin.net/unkin/kea-api:v0.1.2
|
|
tokenSecretName: kea-api-token
|
|
service:
|
|
type: ClusterIP
|
|
port: 8080
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: "1"
|
|
memory: 256Mi
|