From 7459aa9e59173df51fcbe2df460f612ae4aa9abb Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Sat, 7 Nov 2026 12:52:31 +0100 Subject: [PATCH] feat(mqtt): register vitocal-can, the CAN gateway at the Vitocal vitocal-can is a Waveshare ESP32-S3-RS485-CAN running boonkerz/open3e-esp32 on the Vitocal 250-A's external CAN port. It takes over the open3e/# topics from the heating-can stack on edge-1 (S28-28). The controller pushes the password through the firmware's PUT /api/settings over plain HTTP. The firmware sends its compiled-in DHCP hostname, so the device is reachable as open3e.iot.renner.uno regardless of its configured hostname. The controller egress gains that FQDN on port 80. Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/home-assistant/mqtt-accounts.yaml | 7 +++++++ .../network-policies/home-assistant-ns.yaml | 9 ++++++++- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/home-assistant/mqtt-accounts.yaml b/kubernetes/apps/home-assistant/mqtt-accounts.yaml index c6011902..b9192166 100644 --- a/kubernetes/apps/home-assistant/mqtt-accounts.yaml +++ b/kubernetes/apps/home-assistant/mqtt-accounts.yaml @@ -66,6 +66,13 @@ auth: password deliver: {esp32: "https://edge-2.iot.renner.uno:8443"} acl: ["readwrite open3e/#"] +# vitocal-can: open3e-esp32 CAN gateway at the Vitocal 250-A (S28-28). +# The firmware registers its compiled-in DHCP name `open3e`, not its +# configured hostname. +- name: vitocal-can + auth: password + deliver: {esp32: "http://open3e.iot.renner.uno"} + acl: ["readwrite open3e/#"] # Shellies (REN-1017): one password account per device, pushed by the # controller through shelly-manager's per-device API. Name shelly- = # shelly-manager device id. ACL as the former shared user `shellies` diff --git a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml index 971677d0..236d02b0 100644 --- a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml +++ b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml @@ -492,7 +492,7 @@ spec: - port: "6638" protocol: TCP --- -# mqtt-account-controller: credential delivery to edge-1 (deliver.esp32 in mqtt-accounts.yaml). +# mqtt-account-controller: credential delivery to deliver.esp32 targets in mqtt-accounts.yaml. apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: @@ -524,6 +524,13 @@ spec: - ports: - port: "8443" protocol: TCP + # vitocal-can (open3e-esp32), plain HTTP API. + - toFQDNs: + - matchName: "open3e.iot.renner.uno" + toPorts: + - ports: + - port: "80" + protocol: TCP --- # whisper and speech-to-phrase: model downloads over HTTPS. apiVersion: cilium.io/v2 -- 2.54.0