From c0f79a229c00eca68b39d9229af8cfe038e7c907 Mon Sep 17 00:00:00 2001
From: Erki Aas <erki@veebkolm.ee>
Date: Thu, 14 Aug 2025 21:06:59 +0300
Subject: [PATCH] Add unifi controller

---
 metallb-system/application-extras.yaml |  9 +++++++++
 unifi/kustomization.yaml               |  1 +
 unifi/unifi-mongo.yaml                 | 23 ++++-------------------
 unifi/unifi.yaml                       | 13 +++----------
 4 files changed, 17 insertions(+), 29 deletions(-)

diff --git a/metallb-system/application-extras.yaml b/metallb-system/application-extras.yaml
index 325e7c3..3e68e7d 100644
--- a/metallb-system/application-extras.yaml
+++ b/metallb-system/application-extras.yaml
@@ -40,6 +40,15 @@ spec:
 ---
 apiVersion: metallb.io/v1beta1
 kind: IPAddressPool
+metadata:
+  name: unifi
+  namespace: metallb-system
+spec:
+  addresses:
+  - 172.21.102.0/24
+---
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
 metadata:
   name: bind-secondary-external
   namespace: metallb-system
diff --git a/unifi/kustomization.yaml b/unifi/kustomization.yaml
index d946665..c9c69e9 100644
--- a/unifi/kustomization.yaml
+++ b/unifi/kustomization.yaml
@@ -4,5 +4,6 @@ kind: Kustomization
 namespace: &ns unifi
 
 resources:
+- ssh://git@git.k-space.ee/secretspace/kube/unifi # secrets: unifi, unifi-mongo
 - unifi-mongo.yaml
 - unifi.yaml
diff --git a/unifi/unifi-mongo.yaml b/unifi/unifi-mongo.yaml
index 98cb4fd..53ae698 100644
--- a/unifi/unifi-mongo.yaml
+++ b/unifi/unifi-mongo.yaml
@@ -1,14 +1,4 @@
 ---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: unifi-mongo-init
-  namespace: unifi
-data:
-  init-mongo.js: |
-    db.getSiblingDB("unifi").createUser({user: "unifi", pwd: "unifipass", roles: [{role: "dbOwner", db: "unifi"}]});
-    db.getSiblingDB("unifi_stat").createUser({user: "unifi",pwd: "unifipass",roles: [{role: "dbOwner", db: "unifi_stat"}]});
----
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -18,7 +8,6 @@ spec:
   selector:
     matchLabels:
       app: unifi-db
-  serviceName: "router-manager-db"
   replicas: 1
   minReadySeconds: 10
   template:
@@ -29,20 +18,16 @@ spec:
       terminationGracePeriodSeconds: 10
       containers:
         - name: mongodb
-          image: mongo:4
+          image: mongo:8
           ports:
             - containerPort: 27017
               name: mongo
+          envFrom:         
+            - secretRef:
+                name: unifi-mongo             
           volumeMounts:
             - name: data
               mountPath: /data/db
-            - name: unifi-mongo-init
-              mountPath: /docker-entrypoint-initdb.d/init-mongo.js
-              subPath: init-mongo.js
-      volumes:
-        - name: unifi-mongo-init
-          configMap:
-            name: unifi-mongo-init
   volumeClaimTemplates:
     - metadata:
         name: data
diff --git a/unifi/unifi.yaml b/unifi/unifi.yaml
index 6aa11a9..d5e67fd 100644
--- a/unifi/unifi.yaml
+++ b/unifi/unifi.yaml
@@ -39,16 +39,9 @@ spec:
               value: '1000'
             - name: TZ
               value: Etc/UTC
-            - name: MONGO_USER
-              value: "unifi"
-            - name: MONGO_PASSWORD
-              value: "unifipass"
-            - name: MONGO_HOST
-              value: unifi-db
-            - name: MONGO_DBNAME
-              value: "unifi"
-            - name: MONGO_PORT
-              value: "27017"
+          envFrom:         
+            - secretRef:
+                name: unifi              
           ports:
             - containerPort: 3478
               protocol: UDP