diff --git a/kubernetes/apps/home-assistant/mdns-relay-deployment.yaml b/kubernetes/apps/home-assistant/mdns-relay-deployment.yaml
index c1d98619..a3dc8a50 100644
--- a/kubernetes/apps/home-assistant/mdns-relay-deployment.yaml
+++ b/kubernetes/apps/home-assistant/mdns-relay-deployment.yaml
@@ -42,6 +42,11 @@ spec:
       labels:
         app.kubernetes.io/name: mdns-relay
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         k8s.v1.cni.cncf.io/networks: mdns-relay-iot
     spec:
       enableServiceLinks: false
diff --git a/kubernetes/apps/home-assistant/shelly-manager-deployment.yaml b/kubernetes/apps/home-assistant/shelly-manager-deployment.yaml
index 9fd073fe..f48fc4d7 100644
--- a/kubernetes/apps/home-assistant/shelly-manager-deployment.yaml
+++ b/kubernetes/apps/home-assistant/shelly-manager-deployment.yaml
@@ -25,6 +25,11 @@ spec:
       labels:
         app.kubernetes.io/name: shelly-manager
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches `net1` on v30iot with a DHCP-leased address (see
         # shelly-manager-network-attachment.yaml). The mDNS resolver
         # inside the app needs L2 presence on the IoT VLAN to browse
diff --git a/kubernetes/apps/matter-server/deployment.yaml b/kubernetes/apps/matter-server/deployment.yaml
index 9621177d..086ea5c3 100644
--- a/kubernetes/apps/matter-server/deployment.yaml
+++ b/kubernetes/apps/matter-server/deployment.yaml
@@ -16,6 +16,11 @@ spec:
       labels:
         app.kubernetes.io/name: matter-server
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches a second NIC (net1) on the v30iot VLAN via
         # macvlan (see network-attachment.yaml). Matter device
         # commissioning and discovery need real L2 presence on the IoT
diff --git a/kubernetes/apps/music-assistant/deployment.yaml b/kubernetes/apps/music-assistant/deployment.yaml
index 45bda4d6..0ffac119 100644
--- a/kubernetes/apps/music-assistant/deployment.yaml
+++ b/kubernetes/apps/music-assistant/deployment.yaml
@@ -17,6 +17,11 @@ spec:
       labels:
         app.kubernetes.io/name: music-assistant
       annotations:
+        # Bump to restart the pod and take a fresh DHCP lease for net1. A
+        # cni-dhcp-daemon restart drops the leases it renews (it keeps them
+        # in memory only); pods attached before it lose renewal and their
+        # address returns to the UDM pool (see cni-dhcp-daemon.yaml).
+        homelab.renner.uno/dhcp-lease-renew: "2026-10-06"
         # Multus attaches net1 (macvlan on v30iot, DHCP-leased) for direct
         # L2 adjacency to the audio clients (Snapcast / SlimProto /
         # Sendspin) — those protocols sync audio across group members and