From 7602c755cf98f249fa33da9dced287f982ffd3c1 Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Sat, 7 Nov 2026 13:31:57 +0100 Subject: [PATCH] fix(home-assistant): allow MQTTS to mosquitto from the private LAN Restricting mosquitto to net-iot (#1586) cut off MQTT clients on the private LAN; policy drops show one on 8883. TLS port only, plaintext 1883 stays IoT-only. Co-Authored-By: Claude Opus 5.5 --- .../infrastructure/network-policies/home-assistant-ns.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml index 236d02b0..66492ee5 100644 --- a/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml +++ b/kubernetes/infrastructure/network-policies/home-assistant-ns.yaml @@ -194,6 +194,13 @@ spec: protocol: TCP - port: "8883" protocol: TCP + # MQTT clients on the private LAN, TLS only. + - fromCIDRSet: + - cidrGroupRef: net-privat + toPorts: + - ports: + - port: "8883" + protocol: TCP --- apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy -- 2.54.0