feat(shelly-manager): wire Home Assistant onboarding (token + BaseUrl) #267

2026-07-16T15:50:48Z

claude-bot commented

2026-07-16 15:50:48 +00:00

Companion to shelly-manager PR #41 (merged). Enables the app-side HA onboarding by giving shelly-manager the HA admin token and endpoint.

New shelly-manager-llat ExternalSecret → OpenBao apps/home-assistant/shelly-manager-llat (key token).
HomeAssistant__BaseUrl=http://home-assistant (in-namespace svc :80 → nginx sidecar → HA :8123; nginx forwards WS upgrade, verified in proxy.conf, so both the config-flow REST and device-registry WS work). Same-namespace ingress is allowed by the default-deny CNP; probed :80 → 401 = reachable.
HomeAssistant__Token from the new secret.

Security note: HA LLATs are full-admin (unscopable) — this token can do anything in HA; shelly-manager only uses it for Shelly config entries. It lives only in OpenBao/the pod.

After merge + Flux promotes the PR #41 image, onboarding a Shelly will register it in HA automatically. I will run the live end-to-end test then.

🤖 Generated with Claude Code

Companion to shelly-manager PR #41 (merged). Enables the app-side HA onboarding by giving shelly-manager the HA admin token and endpoint. - New `shelly-manager-llat` ExternalSecret → OpenBao `apps/home-assistant/shelly-manager-llat` (key `token`). - `HomeAssistant__BaseUrl=http://home-assistant` (in-namespace svc :80 → nginx sidecar → HA :8123; nginx forwards WS upgrade, verified in proxy.conf, so both the config-flow REST and device-registry WS work). Same-namespace ingress is allowed by the default-deny CNP; probed :80 → 401 = reachable. - `HomeAssistant__Token` from the new secret. **Security note:** HA LLATs are full-admin (unscopable) — this token can do anything in HA; shelly-manager only uses it for Shelly config entries. It lives only in OpenBao/the pod. After merge + Flux promotes the PR #41 image, onboarding a Shelly will register it in HA automatically. I will run the live end-to-end test then. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

claude-bot added 1 commit 2026-07-16 15:50:48 +00:00

feat(shelly-manager): wire Home Assistant onboarding (BaseUrl + admin token) f6f5033b14

Enables the single-click HA onboarding shipped in shelly-manager PR #41:
shelly-manager registers a provisioned Shelly into HA's native integration
by driving HA's config-flow + device-registry API.

- shelly-manager-llat ExternalSecret projects the full-admin HA LLAT from
  OpenBao (apps/home-assistant/shelly-manager-llat, key 'token').
- HomeAssistant__BaseUrl = http://home-assistant (in-namespace svc :80 → nginx
  sidecar → HA :8123; nginx forwards the WS upgrade, so both the REST config-
  flow and the device-registry websocket work). Reachability confirmed: same-
  namespace ingress is allowed by the default-deny-ingress CNP's home-assistant
  rule (probed :80 → 401 = reachable).
- HomeAssistant__Token from the new secret.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

k.renner merged commit 0a90cef59b into master

2026-07-16 15:58:29 +00:00

k.renner referenced this issue from a commit

2026-07-16 15:58:30 +00:00

Merge pull request 'feat(shelly-manager): wire Home Assistant onboarding (token + BaseUrl)' (#267) from feat/shelly-manager-ha-onboarding into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#267