konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 1 Packages Projects Releases 1 Wiki Activity

Revert "poc(audiobookshelf): netbird sidecar" — restore audiobookshelf (PSA blocks it, app is DOWN) #30

Merged
k.renner merged 1 commits from revert-netbird-audiobookshelf into master 2026-06-26 04:49:55 +00:00
Conversation 0 Commits 1 Files Changed 3
-63
k.renner commented 2026-06-26 04:48:49 +00:00
Owner
Copy Link
Copy Source

URGENT — restores audiobookshelf, which is currently DOWN.

PR #29 (#direct-mesh sidecar PoC) is rejected by Pod Security Admission: the audiobookshelf namespace enforces PSA baseline, which forbids NET_ADMIN/SYS_ADMIN/SYS_RESOURCE. The Recreate strategy killed the old pod before the new (rejected) one could start, so the app is offline. This reverts the sidecar to bring it back.

Finding: direct sidecar injection needs caps that PSA baseline blocks — so the model requires either relaxing PSA per app-namespace, or a userspace/netstack netbird that needs no caps (capability uncertain). Decide before retrying.

🤖 Generated with Claude Code

URGENT — restores audiobookshelf, which is currently DOWN. PR #29 (#direct-mesh sidecar PoC) is rejected by Pod Security Admission: the `audiobookshelf` namespace enforces PSA `baseline`, which forbids `NET_ADMIN`/`SYS_ADMIN`/`SYS_RESOURCE`. The `Recreate` strategy killed the old pod before the new (rejected) one could start, so the app is offline. This reverts the sidecar to bring it back. Finding: direct sidecar injection needs caps that PSA `baseline` blocks — so the model requires either relaxing PSA per app-namespace, or a userspace/netstack netbird that needs no caps (capability uncertain). Decide before retrying. 🤖 Generated with Claude Code
k.renner added 1 commit 2026-06-26 04:48:50 +00:00
Revert "poc(audiobookshelf): expose pod directly to NetBird mesh via sidecar" 530990f992 
This reverts commit 8e82b428f5.
k.renner merged commit d430f2a78e into master 2026-06-26 04:49:55 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#30