# Optional: spawn the Terraform-friendly REST API that CRUDs KeaSubnet /
# KeaClientClass CRs. Auth is a bearer token; the operator generates the token
# Secret if absent, or it can be pre-seeded (e.g. by a Vault static secret).
apiVersion: kea.unkin.net/v1alpha1
kind: KeaAPI
metadata:
  name: kea-api
  namespace: dhcp-system
spec:
  replicas: 1
  image: git.unkin.net/unkin/kea-api:latest
  service:
    type: ClusterIP
    port: 8080
  resources:
    requests:
      cpu: 100m
      memory: 64Mi
    limits:
      cpu: "1"
      memory: 256Mi