k8s-ha-git-sync

k8s-ha-git-sync

Toll that allows to sync Kubernetes deployed Home Assistant configuration with Git.

Inspired by Home Assistant Git Pull addon.

Introduction

The tool works by periodically executing a git pull command (default interval: 60s). It then checks the validity of the configuration by calling the Home Assistant API. If the configuration is valid, it triggers a deployment restart using the Kubernetes API.

[!WARNING] The developer of this tool takes no responsibility for any unexpected changes or deletions to your Home Assistant configuration. It is your responsibility to ensure that you have a backup of your configuration before using this tool.

Pre-setup

Home Assistant

In order to validate configuration in Home Assistant, api integration needs to be enabled: documentation.

Then in users profile a long-lived access token for this tool needs to be generated.

Git

Before deploying this tool you must correctly setup the Home Assistant configuration directory as a Git repository with a remote repository. Currently the tool does not support initializing a git repository, or cloning one.

Official Home Assistant container image has git tool pre-installed, and can be used by getting a shell in the pod.

kubectl -n <namespace> exec --stdin --tty <pod> -- /bin/bash
cd /config 
git init -b <branch>
git remote add origin <repo>
git branch --set-upstream-to=origin/<branch> <branch>

.gitignore

Since Home Assistants keeps other various service files like logs, databases, backups etc... , it is recommended to ignore everything in .gitignore file and then only allow synced files.

Example .gitignore:

# Ignore everything
/*

# Synced files
!.gitignore
!configuration.yaml
!configuration/

Deployment

Options

Kubernetes service account

Since this tool uses native Kubernetes API, it uses in-cluster authentication with permissions from the service account of the pod. In order for it to restart deployments, a role and a role binding needs to be created.

Example:

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: homeassistant-sync
  namespace: homeassistant
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: edit-deployments
  namespace: homeassistant
rules:
  - apiGroups: ["apps"]
    resources: ["deployments"]
    verbs: ["get", "update"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: edit-deployments-homeassistant-sync
  namespace: homeassistant
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: edit-deployments
subjects:
  - kind: ServiceAccount
    name: homeassistant-sync
    namespace: homeassistant

Observability

The tool has capability to expose Prometheus metrics. It can be enabled by setting env variable METRICS to true.

Exported metrics: