feat(mqtt): admin login as a register account #1437

2026-10-25T20:06:12Z

claude-bot commented

2026-10-25 20:06:12 +00:00

Moves the owner's broker login admin into mqtt-accounts.yaml (auth: password, deliver: {namespace: home-assistant}, readwrite #), now that the controller can deliver a password account to a Secret (konairius/mqtt-account-controller#13).

Controller image main-cb96b1a → main-b1f294d (#13, the golang.org/x/net bump, Go 1.27.3).
Role mqtt-account-controller-secrets-home-assistant: get/create/patch/delete on Secret mqtt-admin-password by name.

After merge the admin password changes: Dynamic Security knows admin and is asked before the password_file, so the old password stops working on the controller's first loop. The new one is in Secret mqtt-admin-password (key password). No broker restart.

The password_file/acl_file and mosquitto-admin-password.yaml stay for now: removing them changes the broker pod and needs the Zigbee2MQTT restart after it. Separate PR.

Server dry-run of the controller resources passes; register has 39 entries, no duplicate names.

🤖 Generated with Claude Code

Moves the owner's broker login `admin` into `mqtt-accounts.yaml` (`auth: password`, `deliver: {namespace: home-assistant}`, `readwrite #`), now that the controller can deliver a password account to a Secret (konairius/mqtt-account-controller#13). - Controller image `main-cb96b1a` → `main-b1f294d` (#13, the golang.org/x/net bump, Go 1.27.3). - Role `mqtt-account-controller-secrets-home-assistant`: get/create/patch/delete on Secret `mqtt-admin-password` by name. **After merge** the admin password changes: Dynamic Security knows `admin` and is asked before the password_file, so the old password stops working on the controller's first loop. The new one is in Secret `mqtt-admin-password` (key `password`). No broker restart. The password_file/acl_file and `mosquitto-admin-password.yaml` stay for now: removing them changes the broker pod and needs the Zigbee2MQTT restart after it. Separate PR. Server dry-run of the controller resources passes; register has 39 entries, no duplicate names. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

claude-bot added 1 commit 2026-10-25 20:06:12 +00:00

feat(mqtt): admin login as a register account

ci/woodpecker/pr/ci-manifests-test Pipeline was successful

Details

ci/woodpecker/pr/ci-scripts-test Pipeline was successful

Details

3c86f0970c

The controller (main-b1f294d, konairius/mqtt-account-controller#13)
delivers a password account to a namespace Secret. admin moves into the
register with its password in Secret mqtt-admin-password; Dynamic
Security is asked first, so it replaces the password_file login without
a broker restart. The controller gets get/create/patch/delete on that
Secret by name.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

k.renner merged commit ef2024c565 into main

2026-10-25 22:16:23 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#1437