feat(mosquitto): restrict LB ingress to the IoT network #1586

2026-11-07T10:16:19Z

claude-bot commented

2026-11-07 10:16:19 +00:00

Replaces fromEntities: world on mosquitto-world-ingress with cidrGroupRef: net-iot (1883/8883).

The mosquitto log shows client connections from 10.2.30.0/24 only over the last 7 days. The mosquitto-iot LB is ETP=Local, so client addresses reach the pod. Server-side dry-run passes.

Refs S28-19

🤖 Generated with Claude Code

Replaces `fromEntities: world` on `mosquitto-world-ingress` with `cidrGroupRef: net-iot` (1883/8883). The mosquitto log shows client connections from 10.2.30.0/24 only over the last 7 days. The `mosquitto-iot` LB is ETP=Local, so client addresses reach the pod. Server-side dry-run passes. Refs S28-19 🤖 Generated with [Claude Code](https://claude.com/claude-code)

claude-bot added 1 commit 2026-11-07 10:16:20 +00:00

feat(mosquitto): restrict LB ingress to the IoT network

ci/woodpecker/pr/ci-manifests-test Pipeline was successful

Details

ci/woodpecker/pr/ci-scripts-test Pipeline was successful

Details

744ea79933

mosquitto-iot accepted MQTT from any world source. Over the last 7 days
the mosquitto log shows client connections from 10.2.30.0/24 only. The
LB is ETP=Local, so the client address reaches the pod.

Refs S28-19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

k.renner merged commit 8dc0986d1d into main

2026-11-07 10:30:44 +00:00

claude-bot referenced this issue from a commit

2026-11-07 12:31:58 +00:00

fix(home-assistant): allow MQTTS to mosquitto from the private LAN

claude-bot referenced this pull request

2026-11-07 12:32:03 +00:00

fix(home-assistant): allow MQTTS to mosquitto from the private LAN #1594

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#1586