k.rennerandClaude Opus 4.7 074fcddb89 libation: add missing egress allow for HA notify path ...

The audiobookshelf default-deny-ingress CNP carries an egress allowlist
that doesn't include home-assistant, so libation's notifier SYN was
hanging unanswered. Adding a layered CNP that selects libation pods
and adds home-assistant:8123 to their permitted egress targets.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-14 15:50:55 +02:00

.rebuild-report-2026-05-02

docs(rebuild): pipeline 871 consolidated report + Ceph fio baseline

2026-05-03 08:27:46 +02:00

.vscode

Add Unifi and Cloudflare provider configurations and examples

2026-02-02 21:54:10 +01:00

.woodpecker

restore-test: convert to in-cluster CronJob

2026-05-10 18:44:17 +02:00

ansible

feat(garage): expose RPC 3901 for remote garage CLI

2026-04-30 09:24:05 +02:00

ci

revert(security-fix-agent): drop image-tag-bump role

2026-05-01 15:09:06 +02:00

dns-server

chore: Remove local markdown docs; wiki is single source of truth

2026-04-21 07:42:43 +02:00

kubernetes

libation: add missing egress allow for HA notify path

2026-05-14 15:50:55 +02:00

opentofu

network(v30iot): attach IoT VLAN NIC to k8s-1/2/3 too

2026-05-13 11:03:42 +02:00

opentofu-bootstrap

rustfs(bootstrap): stop the three RustFS LXCs

2026-05-09 19:14:59 +02:00

scripts

import-cluster-access: default AWS_PROFILE to "secrets"

2026-05-06 15:49:25 +02:00

.gitignore

ci(security-scan): auto-fix agent that opens PRs for Trivy findings

2026-05-01 09:28:59 +02:00

S

Description

No description provided

38 MiB

Releases 1

master

Latest

2026-01-31 15:05:31 +00:00

Languages

Go 35.7%

Shell 24.3%

Python 22.4%

Jinja 5.1%

HCL 4.8%

Other 7.6%