Add Renovate configuration and job definitions

cluster/apps/renovate/renovate-configmap.yml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-config
+  namespace: default
+data:
+  config.json: |-
+    {
+      platform: 'gitea',
+      endpoint: 'https://gitea.akshun-lab.uk/api/v1',
+      gitAuthor: 'Renovate Bot <renovate@akshun-lab.uk>',
+      username: 'renovate',
+      autodiscover: false,
+      onboardingConfig: {
+        $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+        extends: ['config:recommended']
+      },
+      optimizeForDisabled: true,
+      persistRepoData: true,
+      repositories: ["akshun/public-k3s"],
+    }

cluster/apps/renovate/renovate-job.yml

@@ -0,0 +1,46 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate-bot
+  namespace: default
+spec:
+  schedule: '@daily'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          hostNetwork: true
+          containers:
+            - image: renovate/renovate:41.27.0
+              name: renovate-bot
+              env:
+                - name: RENOVATE_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secrets
+                      key: renovate-token
+                - name: RENOVATE_GITHUB_COM_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-secrets
+                      key: github-token
+                - name: RENOVATE_BASE_DIR
+                  value: '/tmp/renovate/'
+                - name: RENOVATE_CONFIG_FILE
+                  value: '/opt/renovate/config.json'
+                - name: LOG_LEVEL
+                  value: info
+              volumeMounts:
+                - name: config-volume
+                  mountPath: /opt/renovate/
+                - name: work-volume
+                  mountPath: /tmp/renovate/
+          restartPolicy: Never
+          volumes:
+            - name: config-volume
+              configMap:
+                name: renovate-config
+            - name: work-volume
+              emptyDir: {}