feat(edge-host): add edge-2 as second edge host #1576

Merged
k.renner merged 1 commits from feat/edge-2-host into main 2026-11-06 10:01:03 +00:00
Member

Adds edge-2.iot.renner.uno as a second bare-metal edge host (base roles only, no peripherals).

  • Inventory: [edge_host] and [ssh_ca]. Not in zwave_gateway / heating_can. Not in ssh_keys_managed yet.
  • NTP: member of the VRRP group via edge_host, BACKUP with priority 60 (edge-1 stays at 70).
  • MQTT bridge: edge_mqtt_bridge_account defaults to inventory_hostname_short. The bridge client id is derived from it: edge-1 keeps edge1-bridge, edge-2 gets edge2-bridge.
  • Cluster: register account edge-2 (same delivery and ACL as edge-1). The mqtt-account-controller-egress CNP allows edge-2.iot.renner.uno:8443.
  • Loki: edge-2 ships with the existing edge-host login. Hosts are told apart by the host label (inventory_hostname).
  • ssh-ca: installs sudo before the Claude sudo rules (the edge-host base install has none). DSM is skipped.

Refs YouTrack S28-16.

🤖 Generated with Claude Code

Adds `edge-2.iot.renner.uno` as a second bare-metal edge host (base roles only, no peripherals). - Inventory: `[edge_host]` and `[ssh_ca]`. Not in `zwave_gateway` / `heating_can`. Not in `ssh_keys_managed` yet. - NTP: member of the VRRP group via `edge_host`, BACKUP with priority 60 (edge-1 stays at 70). - MQTT bridge: `edge_mqtt_bridge_account` defaults to `inventory_hostname_short`. The bridge client id is derived from it: edge-1 keeps `edge1-bridge`, edge-2 gets `edge2-bridge`. - Cluster: register account `edge-2` (same delivery and ACL as edge-1). The `mqtt-account-controller-egress` CNP allows `edge-2.iot.renner.uno:8443`. - Loki: edge-2 ships with the existing edge-host login. Hosts are told apart by the `host` label (`inventory_hostname`). - ssh-ca: installs `sudo` before the Claude sudo rules (the edge-host base install has none). DSM is skipped. Refs YouTrack S28-16. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-06 09:59:44 +00:00
feat(edge-host): add edge-2 as second edge host
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
4316d503d2
edge-2.iot.renner.uno joins [edge_host] (base roles only, no peripherals)
and [ssh_ca], and the NTP VRRP group as BACKUP with priority 60, below
edge-1.

The MQTT bridge account follows the host's short name instead of a fixed
edge-1, and the bridge client id is derived from it (edge-1 keeps
edge1-bridge). The register gets the account edge-2, and the controller's
egress policy allows edge-2's credential endpoint on 8443.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit 6986f36237 into main 2026-11-06 10:01:03 +00:00
Sign in to join this conversation.