Deploy Zigbee2MQTT in monitoring namespace and integrate Shelly weather station
This commit is contained in:
Moritz Graf
parent
f613721662
commit
494892709d
|
|
@ -0,0 +1,76 @@
|
|||
# Zigbee2MQTT & Shelly Weather Station Integration
|
||||
|
||||
This guide describes how to deploy Zigbee2MQTT in the `monitoring` namespace and pair your **Shelly Weather Station (Ecowitt WS90)** using the **SLZB-MR1U Zigbee multiradio** (`192.168.10.10`).
|
||||
|
||||
> [!NOTE]
|
||||
> These resources have already been successfully applied and verified running in the cluster.
|
||||
|
||||
---
|
||||
|
||||
## 1. Deploy Zigbee2MQTT
|
||||
|
||||
The Kubernetes secret and workload manifests are located in `k8s/monitoring/`:
|
||||
|
||||
```bash
|
||||
# 1. Apply the encrypted secrets (MQTT credentials & Traefik basic auth credentials)
|
||||
# Note: Basic auth credentials are split into 'zigbee2mqtt-auth-secret' to satisfy
|
||||
# Traefik's constraint requiring exactly one key in the basic auth secret.
|
||||
kubectl apply -f k8s/monitoring/zigbee2mqtt.secret.yaml
|
||||
|
||||
# 2. Apply the main deployment, PVC, ConfigMap, Service, Middleware, and Ingress
|
||||
kubectl apply -f k8s/monitoring/zigbee2mqtt.yaml
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 2. Verify the Deployment
|
||||
|
||||
1. Check that the Persistent Volume is provisioned and the pod starts:
|
||||
```bash
|
||||
kubectl get pods -n monitoring -l app=zigbee2mqtt
|
||||
```
|
||||
|
||||
2. Inspect the logs to ensure Zigbee2MQTT connects successfully to the SLZB-MR1U coordinator (`192.168.10.10:7638` — port `7638` is the TI CC2652P7 coordinator chip on the MR1U) and the Mosquitto MQTT broker (`mosquitto.datalab.svc.cluster.local`):
|
||||
```bash
|
||||
kubectl logs -n monitoring deploy/zigbee2mqtt
|
||||
```
|
||||
|
||||
**Expected healthy output:**
|
||||
```
|
||||
info: z2m: Starting Zigbee2MQTT version 1.40.1 (commit #403d3c0)
|
||||
info: z2m: Starting zigbee-herdsman (0.57.3)
|
||||
info: zh:zstack:znp: Opening TCP socket with 192.168.10.10:7638
|
||||
info: zh:zstack:znp: Socket connected
|
||||
info: z2m: zigbee-herdsman started (resumed)
|
||||
info: z2m: Connecting to MQTT server at mqtt://mosquitto.datalab.svc.cluster.local:1883
|
||||
info: z2m: Connected to MQTT server
|
||||
info: z2m: Started frontend on port 0.0.0.0:8080
|
||||
info: z2m: Zigbee2MQTT started!
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 3. Access the Dashboard
|
||||
|
||||
The dashboard is exposed on your custom domain with TLS and basic authentication:
|
||||
* **URL:** [https://zigbee2mqtt.moritzgraf.de](https://zigbee2mqtt.moritzgraf.de)
|
||||
* **Username:** `admin`
|
||||
* **Password:** `moritz-z2m-2026`
|
||||
|
||||
*Note: You can change the basic auth password by running the `k8s/htpasswd.py` script on your machine to generate a new bcrypt hash, then updating the `users` value in `k8s/monitoring/zigbee2mqtt.secret.yaml`.*
|
||||
|
||||
---
|
||||
|
||||
## 4. Pair the Weather Station (WS90)
|
||||
|
||||
1. Open the Zigbee2MQTT dashboard and click **Permit join (All)** at the top right.
|
||||
2. Go to your physical Ecowitt WS90 weather station and **double-press the physical CAL button** on the bottom of the sensor array.
|
||||
3. The LED on the weather station should flash, indicating it is in pairing mode (active for 3 minutes).
|
||||
4. Within a few seconds, the weather station will appear in the Zigbee2MQTT dashboard. You can rename it there (e.g. to `weather_station`).
|
||||
|
||||
---
|
||||
|
||||
## 5. Verify Metrics flow
|
||||
|
||||
* **Home Assistant:** The weather station will be automatically discovered via the MQTT integration. You can verify it under **Settings > Devices & Services > MQTT**.
|
||||
* **Prometheus:** Home Assistant will automatically expose the new weather station entities. You can query them in Prometheus or Grafana (e.g. `homeassistant_sensor_temperature_celsius` or similar entity-based metrics).
|
||||
Binary file not shown.
|
|
@ -0,0 +1,163 @@
|
|||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: zigbee2mqtt-pvc
|
||||
namespace: monitoring
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: zigbee2mqtt-config-template
|
||||
namespace: monitoring
|
||||
data:
|
||||
configuration.yaml: |
|
||||
homeassistant: true
|
||||
permit_join: false
|
||||
mqtt:
|
||||
base_topic: zigbee2mqtt
|
||||
server: mqtt://mosquitto.datalab.svc.cluster.local:1883
|
||||
user: sender
|
||||
serial:
|
||||
port: tcp://192.168.10.10:7638
|
||||
frontend:
|
||||
port: 8080
|
||||
host: 0.0.0.0
|
||||
advanced:
|
||||
network_key: GENERATE
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: zigbee2mqtt
|
||||
namespace: monitoring
|
||||
labels:
|
||||
app: zigbee2mqtt
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: zigbee2mqtt
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: zigbee2mqtt
|
||||
spec:
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
runAsUser: 1000
|
||||
initContainers:
|
||||
- name: init-config
|
||||
image: busybox:latest
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
if [ ! -f /app/data/configuration.yaml ]; then
|
||||
echo "Initializing configuration.yaml..."
|
||||
cp /tmp/config/configuration.yaml /app/data/configuration.yaml
|
||||
chmod 600 /app/data/configuration.yaml
|
||||
else
|
||||
echo "configuration.yaml already exists. Skipping initialization."
|
||||
fi
|
||||
securityContext:
|
||||
runAsUser: 1000
|
||||
volumeMounts:
|
||||
- name: data
|
||||
mountPath: /app/data
|
||||
- name: config-template
|
||||
mountPath: /tmp/config
|
||||
containers:
|
||||
- name: zigbee2mqtt
|
||||
image: koenkk/zigbee2mqtt:1.40.1
|
||||
env:
|
||||
# Override MQTT credentials/settings using environment variables
|
||||
- name: ZIGBEE2MQTT_CONFIG_MQTT_SERVER
|
||||
value: "mqtt://mosquitto.datalab.svc.cluster.local:1883"
|
||||
- name: ZIGBEE2MQTT_CONFIG_MQTT_USER
|
||||
value: "sender"
|
||||
- name: ZIGBEE2MQTT_CONFIG_MQTT_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: zigbee2mqtt-secret
|
||||
key: mqtt-password
|
||||
# Override Zigbee Coordinator settings using environment variables
|
||||
- name: ZIGBEE2MQTT_CONFIG_SERIAL_PORT
|
||||
value: "tcp://192.168.10.10:7638"
|
||||
ports:
|
||||
- name: http-frontend
|
||||
containerPort: 8080
|
||||
resources:
|
||||
requests:
|
||||
cpu: 10m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 256Mi
|
||||
volumeMounts:
|
||||
- name: data
|
||||
mountPath: /app/data
|
||||
volumes:
|
||||
- name: data
|
||||
persistentVolumeClaim:
|
||||
claimName: zigbee2mqtt-pvc
|
||||
- name: config-template
|
||||
configMap:
|
||||
name: zigbee2mqtt-config-template
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: zigbee2mqtt
|
||||
namespace: monitoring
|
||||
labels:
|
||||
app: zigbee2mqtt
|
||||
spec:
|
||||
ports:
|
||||
- name: http-frontend
|
||||
port: 8080
|
||||
targetPort: 8080
|
||||
protocol: TCP
|
||||
selector:
|
||||
app: zigbee2mqtt
|
||||
---
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: Middleware
|
||||
metadata:
|
||||
name: zigbee2mqtt-auth
|
||||
namespace: monitoring
|
||||
spec:
|
||||
basicAuth:
|
||||
secret: zigbee2mqtt-auth-secret
|
||||
removeHeader: true
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: zigbee2mqtt
|
||||
namespace: monitoring
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
traefik.ingress.kubernetes.io/router.middlewares: monitoring-zigbee2mqtt-auth@kubernetescrd
|
||||
spec:
|
||||
ingressClassName: traefik
|
||||
rules:
|
||||
- host: zigbee2mqtt.moritzgraf.de
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
backend:
|
||||
service:
|
||||
name: zigbee2mqtt
|
||||
port:
|
||||
number: 8080
|
||||
tls:
|
||||
- hosts:
|
||||
- "zigbee2mqtt.moritzgraf.de"
|
||||
secretName: zigbee2mqtt-tls
|
||||
Loading…
Reference in New Issue