openbao: suspend mosquitto open3e-int rotator (REN-802) #1153

2026-10-06T13:11:55Z

Ghost commented

2026-10-06 13:11:55 +00:00

What: suspend: true on CronJob openbao/mosquitto-open3e-int-secret-rotate.

Why: The next quarterly run is on 2026-12-01 04:00. It would rotate the broker password for open3e-int, but the ESP32 gateway only gets its password by hand, so the gateway would go offline. REN-802 (plan Rev. 9, accepted) moves MQTT credentials to a register in git, and this rotator is removed during that cleanup.

Impact: None on running traffic. Only future scheduled runs are skipped, and the current password stays as it is.

Verify after merge: kubectl -n openbao get cronjob mosquitto-open3e-int-secret-rotate -o jsonpath='{.spec.suspend}' → true.

Revert: revert this commit.

🤖 Generated with Claude Code

**What:** `suspend: true` on CronJob `openbao/mosquitto-open3e-int-secret-rotate`. **Why:** The next quarterly run is on 2026-12-01 04:00. It would rotate the broker password for `open3e-int`, but the ESP32 gateway only gets its password by hand, so the gateway would go offline. REN-802 (plan Rev. 9, accepted) moves MQTT credentials to a register in git, and this rotator is removed during that cleanup. **Impact:** None on running traffic. Only future scheduled runs are skipped, and the current password stays as it is. **Verify after merge:** `kubectl -n openbao get cronjob mosquitto-open3e-int-secret-rotate -o jsonpath='{.spec.suspend}'` → `true`. **Revert:** revert this commit. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

Ghost added 1 commit 2026-10-06 13:11:55 +00:00

openbao: suspend mosquitto open3e-int rotator (REN-802)

ci/woodpecker/pr/ci-scripts-test Pipeline was successful

Details

ci/woodpecker/pr/pr-review Pipeline was successful

Details

ci/woodpecker/pr/ci-manifests-test Pipeline was successful

Details

e677986f3e

The quarterly rotation on 2026-12-01 would change the broker password while
the ESP32 gateway keeps the old one, taking it offline.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Ghost approved these changes

2026-10-06 13:17:20 +00:00

Ghost left a comment

Approved at e677986f. Checked: diff adds only suspend: true to CronJob openbao/mosquitto-open3e-int-secret-rotate; premise matches wiki open3e-int-device-instance (mq_pass provisioned by hand via NVS) and the file header; base = current master fdab5883; git diff --check clean; CI ci-manifests-test/ci-scripts-test/pr-review success. Not an outage merge: suspend only skips future schedules, no pod restart. Revert = revert commit.

Approved at e677986f. Checked: diff adds only `suspend: true` to CronJob openbao/mosquitto-open3e-int-secret-rotate; premise matches wiki open3e-int-device-instance (mq_pass provisioned by hand via NVS) and the file header; base = current master fdab5883; git diff --check clean; CI ci-manifests-test/ci-scripts-test/pr-review success. Not an outage merge: suspend only skips future schedules, no pod restart. Revert = revert commit.

Ghost merged commit 53d4ab34fb into master

2026-10-06 13:17:20 +00:00

Ghost referenced this issue from a commit

2026-10-06 13:17:22 +00:00

Merge pull request 'openbao: suspend mosquitto open3e-int rotator (REN-802)' (#1153) from atlas/ren-802-suspend-open3e-int-rotator into master

Ghost referenced this pull request

2026-10-07 17:18:24 +00:00

feat(mqtt): remove legacy broker users shellies and open3e-int (REN-1017 step 4, window) #1191

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#1153