fix(shelly-manager): wire ADMIN_PASSWORD — app fails closed since auth hardening #246

Merged
k.renner merged 1 commits from fix/shelly-manager-admin-password into master 2026-07-15 23:04:45 +00:00
Member

shelly-manager PR #38 made the app refuse to start without ADMIN_PASSWORD; Flux promoted the new image and the pod has been in CrashLoopBackOff since. Adds the shelly-manager-auth ExternalSecret (OpenBao path apps/home-assistant/shelly-manager-auth — already seeded via the new write-only claude-bot OpenBao identity), env wiring for ADMIN_PASSWORD + Auth__ApiKey, repoints both probes to the new unauthenticated /health endpoint (closes the long-standing probe gap), and refreshes the stale no-auth annotation.

🤖 Generated with Claude Code

shelly-manager PR #38 made the app refuse to start without ADMIN_PASSWORD; Flux promoted the new image and the pod has been in CrashLoopBackOff since. Adds the shelly-manager-auth ExternalSecret (OpenBao path apps/home-assistant/shelly-manager-auth — already seeded via the new write-only claude-bot OpenBao identity), env wiring for ADMIN_PASSWORD + Auth__ApiKey, repoints both probes to the new unauthenticated /health endpoint (closes the long-standing probe gap), and refreshes the stale no-auth annotation. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-07-15 16:58:18 +00:00
The public-release auth work (shelly-manager PR #38) makes the app refuse
to start without ADMIN_PASSWORD; Flux promoted the new image and the pod
went CrashLoopBackOff. Adds the shelly-manager-auth ExternalSecret
(OpenBao: apps/home-assistant/shelly-manager-auth) and the env wiring,
repoints both probes to the new unauthenticated /health endpoint (closes
the long-standing probe gap — / would now 302 to /login), and updates the
stale 'app has no auth of its own' annotation: the macvlan bind pinning
stays as defense in depth.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
k.renner merged commit 9170c4cf36 into master 2026-07-15 23:04:45 +00:00
Sign in to join this conversation.