From f48c9f81cbbe0158ad3e1f2ce9a8f24a2f83e12a Mon Sep 17 00:00:00 2001
From: aggarwalakshun <aggarwalakshun@gmail.com>
Date: Thu, 10 Jul 2025 05:10:53 +0530
Subject: [PATCH] Add Renovate configuration and job definitions

---
 cluster/apps/renovate/renovate-configmap.yml | 22 ++++++++++
 cluster/apps/renovate/renovate-job.yml       | 46 ++++++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 cluster/apps/renovate/renovate-configmap.yml
 create mode 100644 cluster/apps/renovate/renovate-job.yml

diff --git a/cluster/apps/renovate/renovate-configmap.yml b/cluster/apps/renovate/renovate-configmap.yml
new file mode 100644
index 0000000..b439ef3
--- /dev/null
+++ b/cluster/apps/renovate/renovate-configmap.yml
@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-config
+  namespace: default
+data:
+  config.json: |-
+    {
+      platform: 'gitea',
+      endpoint: 'https://gitea.akshun-lab.uk/api/v1',
+      gitAuthor: 'Renovate Bot <renovate@akshun-lab.uk>',
+      username: 'renovate',
+      autodiscover: false,
+      onboardingConfig: {
+        $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+        extends: ['config:recommended']
+      },
+      optimizeForDisabled: true,
+      persistRepoData: true,
+      repositories: ["akshun/public-k3s"],
+    }
diff --git a/cluster/apps/renovate/renovate-job.yml b/cluster/apps/renovate/renovate-job.yml
new file mode 100644
index 0000000..b2cd7e1
--- /dev/null
+++ b/cluster/apps/renovate/renovate-job.yml
@@ -0,0 +1,46 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate-bot
+  namespace: default
+spec:
+  schedule: '@daily'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          hostNetwork: true
+          containers:
+            - image: renovate/renovate:41.27.0
+              name: renovate-bot
+              env:
+                - name: RENOVATE_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secrets
+                      key: renovate-token
+                - name: RENOVATE_GITHUB_COM_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secrets
+                      key: github-token
+                - name: RENOVATE_BASE_DIR
+                  value: '/tmp/renovate/'
+                - name: RENOVATE_CONFIG_FILE
+                  value: '/opt/renovate/config.json'
+                - name: LOG_LEVEL
+                  value: info
+              volumeMounts:
+                - name: config-volume
+                  mountPath: /opt/renovate/
+                - name: work-volume
+                  mountPath: /tmp/renovate/
+          restartPolicy: Never
+          volumes:
+            - name: config-volume
+              configMap:
+                name: renovate-config
+            - name: work-volume
+              emptyDir: {}