unkinben
d3fb5dcd1a
Replace the ISC dhcpd PXE-boot VM with a Kea DHCP Kubernetes operator, modelled on bind-operator. The operator renders kea-dhcp4 config from CRs and runs an HA pair of kea-dhcp4 + kea-ctrl-agent servers behind an anycast Service. - add KeaCluster/KeaSubnet/KeaClientClass/KeaAPI CRDs (group kea.unkin.net) - render deterministic kea-dhcp4.conf + kea-ctrl-agent.conf into a ConfigMap and roll the StatefulSet via a config-hash annotation; best-effort hot-reload via the kea-ctrl-agent REST channel - run HA hot-standby (memfile leases) with stable per-peer DNS identity from a StatefulSet; expose an anycast LoadBalancer Service for PureLB - represent the full legacy dhcpd config: 198.18.13-17.0/24 pools, pool-less 198.18.25.0/24, and the Legacy/UEFI-64 PXE arch classes (option 93) - add the KeaAPI-spawned REST service: Terraform-friendly CRUD over subnet and client-class CRs (stable IDs, PUT upsert, 404 drift, bearer-token auth) - add Makefile (patch/minor/major tag targets), distroless operator/api images, an AlmaLinux+EPEL kea workload image, and woodpecker CI with k8s resources + serviceAccountName on every step - unit tests for config rendering, controller reconcile/config-hash, and the API Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
69 lines
1.8 KiB
Go
69 lines
1.8 KiB
Go
package kea
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
// ControlClient talks to a kea-ctrl-agent REST endpoint.
|
|
type ControlClient struct {
|
|
HTTP *http.Client
|
|
}
|
|
|
|
// NewControlClient returns a ControlClient with a bounded timeout.
|
|
func NewControlClient() *ControlClient {
|
|
return &ControlClient{HTTP: &http.Client{Timeout: 5 * time.Second}}
|
|
}
|
|
|
|
type command struct {
|
|
Command string `json:"command"`
|
|
Service []string `json:"service,omitempty"`
|
|
Arguments any `json:"arguments,omitempty"`
|
|
}
|
|
|
|
type response struct {
|
|
Result int `json:"result"`
|
|
Text string `json:"text"`
|
|
}
|
|
|
|
// ConfigReload asks the dhcp4 server behind the agent at baseURL to re-read its
|
|
// config file from disk (the hot-reload path, analogous to rndc reconfig).
|
|
func (c *ControlClient) ConfigReload(ctx context.Context, baseURL string) error {
|
|
return c.send(ctx, baseURL, command{Command: "config-reload", Service: []string{"dhcp4"}})
|
|
}
|
|
|
|
func (c *ControlClient) send(ctx context.Context, baseURL string, cmd command) error {
|
|
body, err := json.Marshal(cmd)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodPost, baseURL, bytes.NewReader(body))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
req.Header.Set("Content-Type", "application/json")
|
|
|
|
resp, err := c.HTTP.Do(req)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer resp.Body.Close()
|
|
if resp.StatusCode != http.StatusOK {
|
|
return fmt.Errorf("kea control %q: http %d", cmd.Command, resp.StatusCode)
|
|
}
|
|
var results []response
|
|
if err := json.NewDecoder(resp.Body).Decode(&results); err != nil {
|
|
return fmt.Errorf("decode kea control response: %w", err)
|
|
}
|
|
for _, r := range results {
|
|
if r.Result != 0 {
|
|
return fmt.Errorf("kea control %q failed: %s", cmd.Command, r.Text)
|
|
}
|
|
}
|
|
return nil
|
|
}
|