Helm/UniFi-Network
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

init commit

Browse Source
This commit is contained in:
Mr. Swordsteel
2025-09-30 13:22:00 +02:00
commit 2f149e0e7d
14 changed files with 355 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
helm/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,26 @@
{{- define "unifi.name" -}}
{{- printf "%s" .Chart.Name | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{- define "unifi.name.config" -}}
{{- printf "%s-config" .Chart.Name | trunc 56 | trimSuffix "-" -}}
{{- end -}}
{{- define "unifi.name.secret" -}}
{{- printf "%s-secret" .Chart.Name | trunc 56 | trimSuffix "-" -}}
{{- end -}}
{{- define "unifi.credentials.name" -}}
{{- printf "%s-credentials" .Chart.Name | trunc 51 | trimSuffix "-" -}}
{{- end -}}
{{- define "unifi.credentials.name.secret" -}}
{{- printf "%s-credentials-secret" .Chart.Name | trunc 44 | trimSuffix "-" -}}
{{- end -}}
{{- define "unifi.labels" -}}
app.kubernetes.io/name: {{ include "unifi.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
{{- end -}}

15
helm/templates/config.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "unifi.name.config" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
data:
PUID: {{ .Values.config.puid | quote }}
PGID: {{ .Values.config.pgid | quote }}
TZ: {{ .Values.config.timezone | quote }}
MONGO_HOST: {{ .Values.mongo.hostname | quote }}
MONGO_PORT: {{ .Values.mongo.port | quote }}
MONGO_DBNAME: {{ .Values.mongo.database | quote }}
MONGO_USER: {{ .Values.mongo.username | quote }}
MONGO_AUTHSOURCE: "admin"

51
helm/templates/credentials/job.yaml Normal file
View File

@@ -0,0 +1,51 @@
{{- if .Values.initJob.enabled }}
apiVersion: batch/v1
kind: Job
metadata:
name: {{ include "unifi.credentials.name" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
spec:
template:
metadata:
name: {{ include "unifi.credentials.name" . }}
labels:
app.kubernetes.io/name: {{ include "unifi.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
spec:
restartPolicy: OnFailure
containers:
- name: mongo-init
image: "{{ .Values.initJob.image.repository }}:{{ .Values.initJob.image.tag }}"
imagePullPolicy: {{ .Values.initJob.image.pullPolicy }}
envFrom:
- secretRef:
name: {{ include "unifi.credentials.name.secret" . }}
command:
- bash
- -c
- |
# Wait until MongoDB is ready
until mongosh "mongodb://$MONGO_ROOT_USERNAME:$MONGO_ROOT_PASSWORD@{{ .Values.mongo.hostname }}:{{ .Values.mongo.port }}/admin" --eval "db.adminCommand('ping')" > /dev/null 2>&1; do
echo "Waiting for MongoDB..."
sleep 5
done
mongosh "mongodb://$MONGO_ROOT_USERNAME:$MONGO_ROOT_PASSWORD@{{ .Values.mongo.hostname }}:{{ .Values.mongo.port }}/admin" --eval "
db = db.getSiblingDB('admin');
if (!db.getUser('{{ .Values.mongo.username }}')) {
print('Creating user: {{ .Values.mongo.username }}');
db.createUser({
user: '{{ .Values.mongo.username }}',
pwd: '{{ .Values.mongo.password }}',
roles: [
{ db: '{{ .Values.mongo.database }}', role: 'dbOwner' },
{ db: '{{ .Values.mongo.database }}_stat', role: 'dbOwner' },
{ db: '{{ .Values.mongo.database }}_audit', role: 'dbOwner' }
]
});
} else {
print('User already exists, skipping');
}
"
{{- end }}

12
helm/templates/credentials/secret.yaml Normal file
View File

@@ -0,0 +1,12 @@
{{- if .Values.initJob.enabled }}
apiVersion: v1
kind: Secret
metadata:
name: {{ include "unifi.credentials.name.secret" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
type: Opaque
stringData:
MONGO_ROOT_PASSWORD: "{{ .Values.mongodb.auth.rootPassword }}"
MONGO_ROOT_USERNAME: "{{ .Values.mongodb.auth.rootUsername }}"
{{- end }}

9
helm/templates/secret.yaml Normal file
View File

@@ -0,0 +1,9 @@
apiVersion: v1
kind: Secret
metadata:
name: {{ include "unifi.name.secret" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
type: Opaque
stringData:
MONGO_PASS: {{ .Values.mongo.password | quote }}

20
helm/templates/service.yaml Normal file
View File

@@ -0,0 +1,20 @@
apiVersion: v1
kind: Service
metadata:
name: {{ include "unifi.name" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
spec:
type: {{ .Values.service.type }}
{{- if and .Values.service.loadBalancerIP (ne .Values.service.loadBalancerIP "") }}
loadBalancerIP: {{ .Values.service.loadBalancerIP }}
{{- end }}
selector:
app.kubernetes.io/name: {{ include "unifi.name" . }}
ports:
{{- range .Values.service.ports }}
- name: {{ .name }}
port: {{ .port }}
targetPort: {{ .targetPort }}
protocol: {{ default "TCP" .protocol }}
{{- end }}

54
helm/templates/statefulset.yaml Normal file
View File

@@ -0,0 +1,54 @@
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: {{ include "unifi.name" . }}
labels:
{{- include "unifi.labels" . | nindent 4 }}
spec:
serviceName: {{ include "unifi.name" . }}
replicas: {{ .Values.replicaCount }}
selector:
matchLabels:
app.kubernetes.io/name: {{ include "unifi.name" . }}
template:
metadata:
labels:
app.kubernetes.io/name: {{ include "unifi.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
spec:
{{- if .Values.config.hostNetwork }}
hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet
{{- end }}
containers:
- name: unifi
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
envFrom:
- configMapRef:
name: {{ include "unifi.name.config" . }}
- secretRef:
name: {{ include "unifi.name.secret" . }}
ports:
{{- range .Values.service.ports }}
- name: {{ .name }}
containerPort: {{ .targetPort }}
protocol: {{ default "TCP" .protocol }}
{{- end }}
volumeMounts:
- name: data
mountPath: /config
resources:
{{- toYaml .Values.resources | nindent 12 }}
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes:
{{ toYaml .Values.persistence.accessModes | nindent 10 }}
resources:
requests:
storage: {{ .Values.persistence.size }}
{{- if .Values.persistence.storageClass }}
storageClassName: {{ .Values.persistence.storageClass }}
{{- end }}