unkinben
5ebf2cc581
## Why kea-dhcp4 and kea-ctrl-agent crash-loop because kea 2.6.5 refuses a unix-socket directory more relaxed than 0750, but the operator's shared emptyDir mounts `/var/run/kea` at 0777 (`'socket-name' is invalid: socket path:/var/run/kea ... more relaxed permissions than 750`). kea-operator v0.1.2 renders entrypoints that tighten it. ## How - bump kea-operator, kea, and kea-api images to v0.1.2 --------- Co-authored-by: Ben Vincent <neotheo@gmail.com> Reviewed-on: #343 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>
36 lines
1.0 KiB
YAML
36 lines
1.0 KiB
YAML
---
|
|
# HA pair fronted by a PureLB anycast Service on a NEW, unused common-pool IP
|
|
# (198.18.200.10). This is intentionally NOT the current isc-dhcpd anycast
|
|
# address (198.18.19.18) -- the production cutover is a separate later task.
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaCluster
|
|
metadata:
|
|
name: kea
|
|
namespace: dhcp-system
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
replicas: 2
|
|
image: git.unkin.net/unkin/kea:v0.1.2
|
|
domainName: main.unkin.net
|
|
defaultLeaseTime: 1200
|
|
maxLeaseTime: 86400
|
|
# No ntpServers: DHCP option 42 (ntp-servers) carries IPv4 addresses only, so
|
|
# the rotating AU pool.ntp.org hostnames cannot be delivered this way (kea
|
|
# rejects them at config load). Add concrete NTP server IPs here if needed.
|
|
ha:
|
|
mode: hot-standby
|
|
service:
|
|
type: LoadBalancer
|
|
ipAddressPool: common
|
|
loadBalancerIP: 198.18.200.10
|
|
annotations:
|
|
purelb.io/addresses: 198.18.200.10
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: "1"
|
|
memory: 512Mi
|