From 5eff31595e018f0895a921400d425b8e21f9b392 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 17 Jan 2026 01:28:13 -0300
Subject: [PATCH] maintenance: add k3s agent restart daemonset

---
 .../k3s-agent-restart-daemonset.yaml          | 49 +++++++++++++++++++
 services/maintenance/kustomization.yaml       |  1 +
 2 files changed, 50 insertions(+)
 create mode 100644 services/maintenance/k3s-agent-restart-daemonset.yaml

diff --git a/services/maintenance/k3s-agent-restart-daemonset.yaml b/services/maintenance/k3s-agent-restart-daemonset.yaml
new file mode 100644
index 0000000..e91e348
--- /dev/null
+++ b/services/maintenance/k3s-agent-restart-daemonset.yaml
@@ -0,0 +1,49 @@
+# services/maintenance/k3s-agent-restart-daemonset.yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: k3s-agent-restart
+  namespace: maintenance
+spec:
+  selector:
+    matchLabels:
+      app: k3s-agent-restart
+  updateStrategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: k3s-agent-restart
+    spec:
+      serviceAccountName: node-nofile
+      hostPID: true
+      hostNetwork: true
+      nodeSelector:
+        kubernetes.io/arch: arm64
+        node-role.kubernetes.io/worker: "true"
+      tolerations:
+        - key: node-role.kubernetes.io/control-plane
+          operator: Exists
+          effect: NoSchedule
+        - key: node-role.kubernetes.io/master
+          operator: Exists
+          effect: NoSchedule
+      containers:
+        - name: restart
+          image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131
+          command:
+            - /bin/sh
+            - -c
+          args:
+            - |
+              set -euo pipefail
+              if nsenter -t 1 -m -u -i -n -p -- /usr/bin/systemctl restart k3s-agent; then
+                echo "k3s-agent restarted"
+              else
+                nsenter -t 1 -m -u -i -n -p -- /bin/systemctl restart k3s-agent
+                echo "k3s-agent restarted via /bin/systemctl"
+              fi
+              sleep infinity
+          securityContext:
+            privileged: true
+            runAsUser: 0
diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml
index 8251b27..e53ed3c 100644
--- a/services/maintenance/kustomization.yaml
+++ b/services/maintenance/kustomization.yaml
@@ -10,6 +10,7 @@ resources:
   - disable-k3s-traefik-daemonset.yaml
   - k3s-traefik-cleanup-job.yaml
   - node-nofile-daemonset.yaml
+  - k3s-agent-restart-daemonset.yaml
   - pod-cleaner-cronjob.yaml
   - node-image-sweeper-serviceaccount.yaml
   - node-image-sweeper-daemonset.yaml