Merge pull request 'feat(mqtt): register vitocal-can, the CAN gateway at the Vitocal' (#1593 ) from feat/vitocal-can-mqtt-account into main

Reviewed-on: #1593
feat(mqtt): register vitocal-can, the CAN gateway at the Vitocal
2026-11-07 12:16:07 +00:00 · 2026-11-07 12:52:31 +01:00
2 changed files with 15 additions and 1 deletions
@@ -66,6 +66,13 @@
  auth: password
  deliver: {esp32: "https://edge-2.iot.renner.uno:8443"}
  acl: ["readwrite open3e/#"]
+# vitocal-can: open3e-esp32 CAN gateway at the Vitocal 250-A (S28-28).
+# The firmware registers its compiled-in DHCP name `open3e`, not its
+# configured hostname.
+- name: vitocal-can
+  auth: password
+  deliver: {esp32: "http://open3e.iot.renner.uno"}
+  acl: ["readwrite open3e/#"]
 # Shellies (REN-1017): one password account per device, pushed by the
 # controller through shelly-manager's per-device API. Name shelly-<id> =
 # shelly-manager device id. ACL as the former shared user `shellies`
@@ -492,7 +492,7 @@ spec:
            - port: "6638"
              protocol: TCP
 ---
-# mqtt-account-controller: credential delivery to edge-1 (deliver.esp32 in mqtt-accounts.yaml).
+# mqtt-account-controller: credential delivery to deliver.esp32 targets in mqtt-accounts.yaml.
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -524,6 +524,13 @@ spec:
        - ports:
            - port: "8443"
              protocol: TCP
+    # vitocal-can (open3e-esp32), plain HTTP API.
+    - toFQDNs:
+        - matchName: "open3e.iot.renner.uno"
+      toPorts:
+        - ports:
+            - port: "80"
+              protocol: TCP
 ---
 # whisper and speech-to-phrase: model downloads over HTTPS.
 apiVersion: cilium.io/v2