feat(network-policies): let Home Assistant reach the chat model

HA 2026.8.3 ships a native `llama_cpp` integration, so an Assist conversation agent backed by the cluster's own model needs no custom component — only a path from the HA pod to llama-server, which two default-deny policies currently block in both directions. Verified from inside the pod: the call to llama-server.ai.svc.cluster.local:8080 times out today. Both grants are scoped to the single pod and port, mirroring the paperless grant next to them, so neither widens if something else is placed in the other namespace. llama-embed is deliberately excluded: the conversation agent uses chat completions only. Tool calling was verified against the running model before adding this — the Assist API requires it, and llama.cpp only exposes it for some builds. b10731 returns finish_reason=tool_calls and parses German commands into the right arguments without --jinja. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-02 14:18:30 +02:00
2 changed files with 23 additions and 0 deletions
@@ -34,6 +34,17 @@ spec:
        - ports:
            - port: "8080"
              protocol: TCP
+    # Home Assistant's llama.cpp conversation agent calls the chat model only —
+    # it has no use for the embedding endpoint, so unlike paperless above this
+    # grant does not extend to llama-embed.
+    - fromEndpoints:
+        - matchLabels:
+            "k8s:io.kubernetes.pod.namespace": home-assistant
+            app.kubernetes.io/name: home-assistant
+      toPorts:
+        - ports:
+            - port: "8080"
+              protocol: TCP
    - fromEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": monitoring
@@ -167,6 +167,18 @@ spec:
    - toEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": influxdb
+    # The cluster's own chat model, for the llama.cpp conversation agent that
+    # backs Assist. Scoped to the one pod and port rather than the ai namespace
+    # as a whole, so this grant cannot widen if something else is placed there —
+    # the embedding endpoint next to it is deliberately not included.
+    - toEndpoints:
+        - matchLabels:
+            "k8s:io.kubernetes.pod.namespace": ai
+            app.kubernetes.io/name: llama-server
+      toPorts:
+        - ports:
+            - port: "8080"
+              protocol: TCP
    # traefik for east-west OIDC roundtrips that go through the
    # public hostname via k8s_gateway.
    - toEndpoints: