---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: pxeforge
  namespace: pxeforge
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: pxeforge-config
  namespace: pxeforge
data:
  # Toggle DHCP proxy on or off. "proxy" = answer PXE clients alongside an
  # existing DHCP server. "disabled" = require operator to point an external
  # DHCP at us via next-server/filename.
  PXEFORGE_DHCP_MODE: "proxy"
  # Override if auto-detection picks the wrong NIC in multi-homed pods.
  # Leave unset to auto-detect from the node's primary IPv4.
  # PXEFORGE_PUBLIC_IP: "10.0.0.5"
  PXEFORGE_LOG: "info,pxeforge=info"
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: pxeforge-isos
  namespace: pxeforge
spec:
  # ReadWriteOnce is fine — we deploy as a single replica since DHCP proxy
  # coordination across replicas is not useful (clients hit whichever node
  # hostNetwork catches their broadcast).
  accessModes: ["ReadWriteOnce"]
  resources:
    requests:
      storage: 200Gi