unkinben
d3fb5dcd1a
Replace the ISC dhcpd PXE-boot VM with a Kea DHCP Kubernetes operator, modelled on bind-operator. The operator renders kea-dhcp4 config from CRs and runs an HA pair of kea-dhcp4 + kea-ctrl-agent servers behind an anycast Service. - add KeaCluster/KeaSubnet/KeaClientClass/KeaAPI CRDs (group kea.unkin.net) - render deterministic kea-dhcp4.conf + kea-ctrl-agent.conf into a ConfigMap and roll the StatefulSet via a config-hash annotation; best-effort hot-reload via the kea-ctrl-agent REST channel - run HA hot-standby (memfile leases) with stable per-peer DNS identity from a StatefulSet; expose an anycast LoadBalancer Service for PureLB - represent the full legacy dhcpd config: 198.18.13-17.0/24 pools, pool-less 198.18.25.0/24, and the Legacy/UEFI-64 PXE arch classes (option 93) - add the KeaAPI-spawned REST service: Terraform-friendly CRUD over subnet and client-class CRs (stable IDs, PUT upsert, 404 drift, bearer-token auth) - add Makefile (patch/minor/major tag targets), distroless operator/api images, an AlmaLinux+EPEL kea workload image, and woodpecker CI with k8s resources + serviceAccountName on every step - unit tests for config rendering, controller reconcile/config-hash, and the API Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
92 lines
2.2 KiB
YAML
92 lines
2.2 KiB
YAML
# Full translation of the legacy ISC dhcpd pools: 198.18.13-17.0/24 each with a
|
|
# .200-.220 pool, plus 198.18.25.0/24 with no pool (declared so relayed requests
|
|
# are still serviced). routers .1, dns 198.18.19.15, next-server 198.18.19.19.
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-13
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.13.0/24
|
|
pools:
|
|
- 198.18.13.200 - 198.18.13.220
|
|
routers: [198.18.13.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|
|
nextServer: 198.18.19.19
|
|
---
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-14
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.14.0/24
|
|
pools:
|
|
- 198.18.14.200 - 198.18.14.220
|
|
routers: [198.18.14.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|
|
nextServer: 198.18.19.19
|
|
---
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-15
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.15.0/24
|
|
pools:
|
|
- 198.18.15.200 - 198.18.15.220
|
|
routers: [198.18.15.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|
|
nextServer: 198.18.19.19
|
|
---
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-16
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.16.0/24
|
|
pools:
|
|
- 198.18.16.200 - 198.18.16.220
|
|
routers: [198.18.16.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|
|
nextServer: 198.18.19.19
|
|
---
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-17
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.17.0/24
|
|
pools:
|
|
- 198.18.17.200 - 198.18.17.220
|
|
routers: [198.18.17.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|
|
nextServer: 198.18.19.19
|
|
---
|
|
# No pool: declared so relayed DHCP requests on this net are matched and get
|
|
# options, but no dynamic address is allocated (subnet-mask derives from CIDR).
|
|
apiVersion: kea.unkin.net/v1alpha1
|
|
kind: KeaSubnet
|
|
metadata:
|
|
name: net-198-18-25
|
|
namespace: dhcp-system
|
|
spec:
|
|
clusterRef: pxe
|
|
subnet: 198.18.25.0/24
|
|
routers: [198.18.25.1]
|
|
dnsServers: [198.18.19.15]
|
|
domainName: main.unkin.net
|