fix(home-assistant): disable deprecated http: config section on ha-dev

HA core has migrated the http: config (server_port, ip_ban_enabled,
login_attempts_threshold, use_x_forwarded_for, trusted_proxies) out of
configuration.yaml, causing "already been migrated and is now being
ignored" warnings. Disable http.enabled by default on home-assistant-dev,
mark the section deprecated in both charts, and document removal planned
for appVersion 2027.7.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docs/home-assistant.md

@@ -66,15 +66,30 @@ helm install my-ha ./home-assistant -f my-values.yaml
 | `dbInit.enabled` | Enable database initialization job | `false` |
 | `backup.enabled` | Enable automated PostgreSQL backups | `false` |
 | `backup.node` | Pin backup CronJob to specific node | `""` |
+| `http.enabled` | **Deprecated, see below.** Generate `http.yaml` and include it from `configuration.yaml` | `false` |
 
 For detailed configuration, see the [values.yaml](https://github.com/shadoll/helm-charts/blob/main/home-assistant/values.yaml).
 
+## Deprecations
+
+### `http:` config section (removal planned for appVersion 2027.7)
+HA core has migrated the entire `http:` config section — `server_port`, `ip_ban_enabled`,
+`login_attempts_threshold`, `use_x_forwarded_for`, and `trusted_proxies` — out of
+`configuration.yaml`. Setting `http.enabled: true` makes HA log:
+
+> The HTTP configuration in configuration.yaml has already been migrated and is now being
+> ignored. Please remove the http: block from your configuration.yaml.
+
+Leave `http.enabled: false` (the default). The `init-http` init container, the `http:` values
+block, and this section will be removed from the chart once `appVersion` reaches 2027.7.
+
 ## Architecture
 
 ### Init Containers
 1. **init-config** (always): Cleans up old log files from PVC.
 2. **init-secrets** (when `haSecrets.enabled`): Generates `/config/secrets.yaml` from K8s Secret key-value pairs.
 3. **init-recorder** (when `postgres.enabled`): Generates `/config/recorder.yaml` with PostgreSQL connection string and appends `recorder: !include recorder.yaml` to `configuration.yaml`.
+4. **init-http** (when `http.enabled`, **deprecated**, see [Deprecations](#deprecations)): Generates `/config/http.yaml` and appends `http: !include http.yaml` to `configuration.yaml`.
 
 ### Logging
 The container patches the HA s6-overlay run script to pass `--log-file /dev/null`, disabling file-based logging. All logs go to stdout and are accessible via `kubectl logs`.

home-assistant-dev/Chart.yaml

@@ -4,7 +4,7 @@ description: Home Assistant development build - wraps home-assistant chart with
 type: application
 annotations:
   version-source: dockerhub-dev:homeassistant/home-assistant:^[0-9]+\.[0-9]+\.[0-9]+\.dev[0-9]+$
-version: 0.1.119-dev
+version: 0.1.120-dev
 appVersion: "2026.8.0.dev202607240311"
 dependencies:
   - name: home-assistant

home-assistant-dev/values.yaml

@@ -5,8 +5,13 @@ home-assistant:
 
   hostNetwork: false
 
+  # DEPRECATED: HA core has migrated the http: config section (server_port,
+  # ip_ban_enabled, login_attempts_threshold, use_x_forwarded_for,
+  # trusted_proxies) out of configuration.yaml — it now warns "The HTTP
+  # configuration in configuration.yaml has already been migrated and is
+  # now being ignored". Keep disabled; see home-assistant/values.yaml.
   http:
-    enabled: true
+    enabled: false
 
   homekit:
     enabled: false

home-assistant/Chart.yaml

@@ -5,5 +5,5 @@ type: application
 annotations:
   version-source: github-release:home-assistant/core
   version-pattern: "s|^v||"
-version: 0.1.38
+version: 0.1.39
 appVersion: "2026.7.3"

home-assistant/templates/deployment.yaml

@@ -42,6 +42,7 @@ spec:
             - name: config
               mountPath: /config
         {{- if .Values.http.enabled }}
+        # DEPRECATED: see http: comment in values.yaml. Removed once appVersion reaches 2027.7.
         - name: init-http
           image: busybox:latest
           env:

home-assistant/values.yaml

@@ -72,6 +72,13 @@ persistence:
       - ReadWriteOnce
     storageClass: ""
 
+# DEPRECATED: HA core has migrated this entire http: config section
+# (server_port, ip_ban_enabled, login_attempts_threshold, use_x_forwarded_for,
+# trusted_proxies) out of configuration.yaml. Setting enabled: true now makes
+# HA log "The HTTP configuration in configuration.yaml has already been
+# migrated and is now being ignored. Please remove the http: block from your
+# configuration.yaml." Leave disabled; this section and the init-http
+# container will be removed from the chart once appVersion reaches 2027.7.
 http:
   enabled: false
   server_port: 8123