unkinben
d3fb5dcd1a
Replace the ISC dhcpd PXE-boot VM with a Kea DHCP Kubernetes operator, modelled on bind-operator. The operator renders kea-dhcp4 config from CRs and runs an HA pair of kea-dhcp4 + kea-ctrl-agent servers behind an anycast Service. - add KeaCluster/KeaSubnet/KeaClientClass/KeaAPI CRDs (group kea.unkin.net) - render deterministic kea-dhcp4.conf + kea-ctrl-agent.conf into a ConfigMap and roll the StatefulSet via a config-hash annotation; best-effort hot-reload via the kea-ctrl-agent REST channel - run HA hot-standby (memfile leases) with stable per-peer DNS identity from a StatefulSet; expose an anycast LoadBalancer Service for PureLB - represent the full legacy dhcpd config: 198.18.13-17.0/24 pools, pool-less 198.18.25.0/24, and the Legacy/UEFI-64 PXE arch classes (option 93) - add the KeaAPI-spawned REST service: Terraform-friendly CRUD over subnet and client-class CRs (stable IDs, PUT upsert, 404 drift, bearer-token auth) - add Makefile (patch/minor/major tag targets), distroless operator/api images, an AlmaLinux+EPEL kea workload image, and woodpecker CI with k8s resources + serviceAccountName on every step - unit tests for config rendering, controller reconcile/config-hash, and the API Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
74 lines
1.7 KiB
YAML
74 lines
1.7 KiB
YAML
when:
|
|
- event: tag
|
|
ref: refs/tags/v*
|
|
|
|
steps:
|
|
- name: publish-operator
|
|
image: woodpeckerci/plugin-docker-buildx
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: kea-operator-ci
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: "1"
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: "2"
|
|
settings:
|
|
registry: git.unkin.net
|
|
repo: git.unkin.net/unkin/kea-operator
|
|
dockerfile: Dockerfile.operator
|
|
username: droneci
|
|
password:
|
|
from_secret: DRONECI_PASSWORD
|
|
tags:
|
|
- ${CI_COMMIT_TAG}
|
|
- latest
|
|
|
|
- name: publish-api
|
|
image: woodpeckerci/plugin-docker-buildx
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: kea-operator-ci
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
cpu: "1"
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: "2"
|
|
settings:
|
|
registry: git.unkin.net
|
|
repo: git.unkin.net/unkin/kea-api
|
|
dockerfile: Dockerfile.api
|
|
username: droneci
|
|
password:
|
|
from_secret: DRONECI_PASSWORD
|
|
tags:
|
|
- ${CI_COMMIT_TAG}
|
|
- latest
|
|
|
|
- name: publish-kea
|
|
image: woodpeckerci/plugin-docker-buildx
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: kea-operator-ci
|
|
resources:
|
|
requests:
|
|
memory: 1Gi
|
|
cpu: "1"
|
|
limits:
|
|
memory: 2Gi
|
|
cpu: "2"
|
|
settings:
|
|
registry: git.unkin.net
|
|
repo: git.unkin.net/unkin/kea
|
|
dockerfile: Dockerfile.kea
|
|
username: droneci
|
|
password:
|
|
from_secret: DRONECI_PASSWORD
|
|
tags:
|
|
- ${CI_COMMIT_TAG}
|
|
- latest
|