Merge pull request #686 from 3dwardch3ng/infra/renovate

update renovate

infrastructures/renovate/base/configmap.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: renovate-config-js
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-data:
-  config.js: |
-    module.exports = {
-        // Enter self-hosted configuration options here.
-        // https://docs.renovatebot.com/self-hosted-configuration/
-    }

infrastructures/renovate/base/deployment.yaml

@@ -1,134 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: renovate
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: renovate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: renovate
-    spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-      containers:
-        - name: renovate
-          image: ghcr.io/mend/renovate-ce:7.5.0-full
-          securityContext:
-            allowPrivilegeEscalation: false
-          env:
-            - name: MEND_RNV_ACCEPT_TOS
-              value: y
-            - name: MEND_RNV_LICENSE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: renovate_license_key
-            - name: MEND_RNV_PLATFORM
-              value: github
-            - name: MEND_RNV_ENDPOINT
-              value: "https://api.github.com/"
-            - name: MEND_RNV_DATA_HANDLER_TYPE
-              value: "postgresql"
-            - name: PGDATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_database
-            - name: PGUSER
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_user
-            - name: PGPORT
-              value: "5432"
-            - name: PGHOST
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_host
-            - name: PGPASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_password
-            - name: MEND_RNV_GITHUB_APP_ID
-              value: "938218"
-            - name: RNV_GITHUB_PEM_FILE_PATH
-              value: "/usr/src/app/rpi5-cluster-renovate.2024-07-05.private-key.pem"
-            - name: MEND_RNV_WEBHOOK_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: github_app_webhook_secret
-            - name: MEND_RNV_ADMIN_API_ENABLED
-              value: "true"
-            - name: MEND_RNV_SERVER_API_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: server_api_secret
-            - name: GITHUB_COM_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: github_pat
-            - name: MEND_RNV_AUTODISCOVER_FILTER
-              value: "resources/*,infrastructures/*,apps/*"
-            - name: MEND_RNV_ENQUEUE_JOBS_ON_STARTUP
-              value: "enabled"
-            - name: MEND_RNV_LOG_HISTORY_DIR
-              value: "/logs"
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          livenessProbe:
-            initialDelaySeconds: 2
-            httpGet:
-              path: /health
-              port: http
-            periodSeconds: 10
-            timeoutSeconds: 1
-            failureThreshold: 3
-            successThreshold: 1
-          readinessProbe:
-            httpGet:
-              path: /health
-              port: http
-            periodSeconds: 10
-            timeoutSeconds: 1
-            failureThreshold: 3
-            successThreshold: 1
-          volumeMounts:
-            - name: renovate-config-js-volume
-              mountPath: /usr/src/app/config.js
-              subPath: config.js
-            - name: renovate-cache-volume
-              mountPath: /tmp/renovate
-            - name: renovate-logs
-              mountPath: /logs
-            - name: renovate-gh-app-pem
-              mountPath: /usr/src/app/renovate.private-key.pem
-      volumes:
-        - name: renovate-config-js-volume
-          configMap:
-            name: renovate-config-js
-        - name: renovate-cache-volume
-          emptyDir: {}
-        - name: renovate-logs
-          hostPath:
-            path: /mnt/nfs/AppData/renovate/logs
-            type: Directory
-        - name: renovate-gh-app-pem
-          hostPath:
-            path: /mnt/nfs/AppData/renovate/key/rpi5-cluster-renovate.2024-07-05.private-key.pem
-            type: File
-      nodeSelector:
-        kubernetes.io/arch: amd64

infrastructures/renovate/base/kustomization.yaml

@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources:
+helmCharts:
-  - configmap.yaml
+  - name: mend-renovate-ce
-  - deployment.yaml
+    repo: https://mend.github.io/renovate-ce-ee
-  - service.yaml
+    version: 7.6.0
+    releaseName: mend-renovate-ce
+    valuesFile: values.yaml

infrastructures/renovate/base/service.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: renovate
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-spec:
-  type: ClusterIP
-  ports:
-    - port: 8899
-      targetPort: 8080
-      protocol: TCP
-      name: 8899-tcp
-  selector:
-    app.kubernetes.io/name: renovate

infrastructures/renovate/base/values.yaml

@@ -0,0 +1,39 @@
+renovate:
+  mendRnvAcceptTos: "y"
+  mendRnvPlatform: "github"
+  mendRnvEndpoint: "https://api.github.com/"
+  mendRnvAdminApiEnabled: "true"
+  existingSecret: "renovate-secrets"
+  mendRnvAutoDiscoverFilter: ""
+  mendRnvLogHistoryDir: "/logs"
+postgresql:
+  enabled: true
+  host: "postgresql-primary.argocd.svc.cluster.local"
+  port: 5432
+  database: renovate
+  user: renovate_user
+cachePersistence:
+  enabled: true
+  storageClass: "local-path"
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
+  existingClaim: "renovate-pvc"
+service:
+  type: ClusterIP
+  port: 80
+ingress:
+  enabled: true
+  ingressClassName: nginx
+  hosts:
+    - renovate.cluster.edward.sydney
+nodeSelector:
+  kubernetes.io/arch: amd64
+extraVolumes:
+  - name: logs
+    hostPath:
+      path: /mnt/nfs/AppData/renovate/logs
+      type: Directory
+extraVolumeMounts:
+  - name: logs
+    mountPath: /logs

resources/app-secrets/env/k3s-cluster/templates/renovate.yaml

@@ -6,24 +6,21 @@ metadata:
     sealedsecrets.bitnami.com/cluster-wide: "true"
   creationTimestamp: null
   name: renovate-secrets
-  namespace: renovate
+  namespace: argocd
 spec:
   encryptedData:
-    db_pg_database: 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
+    githubComToken: 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
-    db_pg_host: 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
+    mendRnvGithubAppId: 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
-    db_pg_password: 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
+    mendRnvGithubAppKey: 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
-    db_pg_user: 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
+    mendRnvLicenseKey: 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
-    github_app_webhook_secret: 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
+    mendRnvServerApiSecret: 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
-    github_pat: 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
+    mendRnvWebhookSecret: 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
-    renovate_license_key: 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
+    pgPassword: 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
-    server_api_secret: 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
   template:
     metadata:
       annotations:
-        argocd.argoproj.io/sync-options: Prune=false
         sealedsecrets.bitnami.com/cluster-wide: "true"
-        sealedsecrets.bitnami.com/managed: "true"
       creationTimestamp: null
       name: renovate-secrets
-      namespace: renovate
+      namespace: argocd
     type: Opaque

resources/app-volumes/env/k3s-cluster/templates/renovate-pv.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: renovate-pv
+  namespace: renovate
+  labels:
+    type: local
+spec:
+  storageClassName: local-path
+  volumeMode: Filesystem
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  local:
+    path: "/mnt/nfs/AppData/renovate/cache"
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: renovate-pvc
+    namespace: renovate
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/arch
+              operator: In
+              values:
+                - amd64
+            - key: kubernetes.io/os
+              operator: In
+              values:
+                - linux

resources/app-volumes/env/k3s-cluster/templates/renovate-pvc.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: renovate-pvc
+  namespace: renovate
+  labels:
+    name: renovate-pvc
+spec:
+  storageClassName: local-path
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi