Fix kea CrashLoopBackOff: render socket paths under /var/run/kea #3

Merged
benvin merged 1 commits from benvin/fix-runstatedir-path into main 2026-08-08 18:15:06 +10:00
Owner

kea-0/kea-1 crash-loop on startup (deployed via argocd-apps dhcp-system). kea 2.6.5 restricts control/HA unix socket paths to its compiled runstatedir and rejects any other path by exact string match, even though /var/run symlinks to /run:

FATAL DCTL_CONFIG_FILE_LOAD_FAIL Control-agent reason: invalid path specified: '/run/kea', supported path is '/var/run/kea'

The operator rendered all sockets under /run/kea, so both kea-dhcp4 and kea-ctrl-agent fail config load.

  • Point RunDir at /var/run/kea so every derived config/socket path matches kea's permitted directory.
  • Pre-create /var/run/kea in the kea workload image.
  • Add tests asserting the rendered dhcp4 + ctrl-agent socket paths live under /var/run/kea.

Needs a v0.1.1 release afterwards so argocd-apps can bump the operator image.

https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

kea-0/kea-1 crash-loop on startup (deployed via argocd-apps dhcp-system). kea 2.6.5 restricts control/HA unix socket paths to its compiled runstatedir and rejects any other path by exact string match, even though /var/run symlinks to /run: ``` FATAL DCTL_CONFIG_FILE_LOAD_FAIL Control-agent reason: invalid path specified: '/run/kea', supported path is '/var/run/kea' ``` The operator rendered all sockets under /run/kea, so both kea-dhcp4 and kea-ctrl-agent fail config load. - Point `RunDir` at `/var/run/kea` so every derived config/socket path matches kea's permitted directory. - Pre-create `/var/run/kea` in the kea workload image. - Add tests asserting the rendered dhcp4 + ctrl-agent socket paths live under /var/run/kea. Needs a v0.1.1 release afterwards so argocd-apps can bump the operator image. https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
unkinben added 1 commit 2026-08-06 23:39:14 +10:00
Render kea unix socket paths under /var/run/kea
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
1b8be63d05
Kea 2.6.5 restricts control/HA unix socket paths to its compiled
runstatedir and rejects any other path by exact string match
("invalid path specified: '/run/kea', supported path is '/var/run/kea'"),
even though /var/run is a symlink to /run. The operator rendered sockets
under /run/kea, so kea-dhcp4 and kea-ctrl-agent crash-looped on startup.

- Point RunDir at /var/run/kea so all derived config/socket paths match.
- Pre-create /var/run/kea in the kea image.
- Assert rendered socket paths live under /var/run/kea.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
benvin merged commit a6feed2840 into main 2026-08-08 18:15:06 +10:00
benvin deleted branch benvin/fix-runstatedir-path 2026-08-08 18:15:07 +10:00
Sign in to join this conversation.