k.rennerandClaude Opus 4.7 b4b0df8a29
ci/woodpecker/cron/e2e Pipeline failed
ci/woodpecker/cron/security-scan Pipeline was successful
home-assistant: NAD address /32, not /24, to avoid hijacking cluster-internal routes
The previous /24 installed `10.2.30.0/24 dev net1` as a connected route in HA's pod
namespace. k8s-edge's reported InternalIP is `10.2.30.137` (its v30iot address), so
music-assistant's hostNetwork pod registers that as the service endpoint. HA's
ClusterIP → DNAT path then resolved to `10.2.30.137:8095`, the kernel re-routed via
`dev net1` (10.2.30.0/24 match), and the packet went out net1 with src=10.244.x.x —
wrong subnet for v30iot, kernel returned "Host unreachable". HA→music-assistant broke.

/32 keeps net1 attached for mDNS multicast reception (group membership, not unicast
routing) without claiming the IoT VLAN subnet inside the pod's route table. Unicast
cluster-internal traffic stays on eth0 where Cilium can manage it; Shelly HTTP unicast
to 10.2.30.x continues via eth0 → cluster routing → gateway (the path that's worked
the entire time, and what the user pointed out is correct).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 15:22:18 +02:00
S
Description
No description provided
38 MiB
master
Latest
2026-01-31 15:05:31 +00:00
Languages
Go 35.7%
Shell 24.3%
Python 22.4%
Jinja 5.1%
HCL 4.8%
Other 7.6%