chore(k8s): migrate Zigbee2MQTT to helm in zigbee namespace

2026-07-18 09:42:15 +02:00
parent 44508e865c
commit b4cf4c0961
5 changed files with 136 additions and 206 deletions
@@ -0,0 +1,121 @@
+configmap:
+  enabled: true
+  devices:
+    '0xfc4d6afffe246794':
+      friendly_name: Shelly WS90
+      throttle: 30
+      retain: true
+      qos: 1
+
+statefulset:
+  storage:
+    enabled: true
+    size: 1Gi
+    storageClassName: openebs-hostpath
+
+ingress:
+  enabled: true
+  ingressClassName: traefik
+  annotations:
+    kubernetes.io/ingress.class: "traefik"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    kubernetes.io/tls-acme: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    traefik.ingress.kubernetes.io/router.middlewares: zigbee-zigbee2mqtt-auth@kubernetescrd
+  hosts:
+    - host: zigbee2mqtt.moritzgraf.de
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - secretName: zigbee2mqtt-moritzgraf-de
+      hosts:
+        - zigbee2mqtt.moritzgraf.de
+
+zigbee2mqtt:
+  homeassistant:
+    enabled: true
+  mqtt:
+    base_topic: zigbee2mqtt
+    server: mqtt://mosquitto.datalab.svc.cluster.local:1883
+    user: sender
+    password: ahQueteiRietufeko8do
+  serial:
+    port: tcp://192.168.10.10:7638
+    adapter: zstack
+  frontend:
+    enabled: true
+    port: 8080
+    host: 0.0.0.0
+  advanced:
+    network_key:
+      - 177
+      - 180
+      - 148
+      - 63
+      - 174
+      - 86
+      - 166
+      - 83
+      - 119
+      - 36
+      - 123
+      - 147
+      - 245
+      - 85
+      - 166
+      - 74
+    log_level: debug
+    log_directories_to_keep: 100
+    adapter_concurrent: 8
+    adapter_delay: 100
+    transmit_power: 20
+  device_options: {}
+
+extraResources:
+  - apiVersion: traefik.io/v1alpha1
+    kind: Middleware
+    metadata:
+      name: zigbee2mqtt-auth
+      namespace: zigbee
+    spec:
+      basicAuth:
+        secret: zigbee2mqtt-auth-secret
+        removeHeader: true
+  - apiVersion: monitoring.coreos.com/v1
+    kind: PrometheusRule
+    metadata:
+      name: zigbee2mqtt-alerts
+      namespace: zigbee
+      labels:
+        release: prometheus-operator
+    spec:
+      groups:
+        - name: zigbee2mqtt.rules
+          rules:
+            - alert: Zigbee2MQTTDown
+              expr: kube_pod_container_status_ready{container="zigbee2mqtt", namespace="zigbee"} == 0
+              for: 1h
+              labels:
+                severity: critical
+              annotations:
+                summary: "Zigbee2MQTT is down"
+                description: "The Zigbee2MQTT pod is not ready. This typically indicates a connection failure to the SLZB-MR1U coordinator host at 192.168.10.10:7638, or a crash within the Z2M application."
+            - alert: Zigbee2MQTTBridgeOffline
+              expr: homeassistant_binary_sensor_state{entity="binary_sensor.zigbee2mqtt_bridge_connection_state"} == 0
+              for: 1h
+              labels:
+                severity: critical
+              annotations:
+                summary: "Zigbee2MQTT Bridge Connection Offline"
+                description: "The Zigbee2MQTT bridge connection is reported as offline. The bridge has lost communication with the MQTT broker or the Zigbee coordinator."
+            - alert: ShellyWS90MetricsStale
+              expr: absent(homeassistant_sensor_temperature_celsius{entity="sensor.shelly_ws90_temperatur"}) or (time() - max(homeassistant_last_updated_time_seconds{entity=~"sensor.shelly_ws90_.*"}) > 3600)
+              for: 1h
+              labels:
+                severity: warning
+              annotations:
+                summary: "Shelly WS90 Weather Station metrics are stale"
+                description: "No new metrics have been received from the Shelly WS90 weather station (sensor.shelly_ws90_temperatur) for over 1 hour. The device may be offline, out of range, or batteries might be depleted."