update renovate

infrastructures/renovate/base/configmap.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: renovate-config-js
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-data:
-  config.js: |
-    module.exports = {
-        // Enter self-hosted configuration options here.
-        // https://docs.renovatebot.com/self-hosted-configuration/
-    }

infrastructures/renovate/base/deployment.yaml

@@ -1,134 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: renovate
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: renovate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: renovate
-    spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-      containers:
-        - name: renovate
-          image: ghcr.io/mend/renovate-ce:7.5.0-full
-          securityContext:
-            allowPrivilegeEscalation: false
-          env:
-            - name: MEND_RNV_ACCEPT_TOS
-              value: y
-            - name: MEND_RNV_LICENSE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: renovate_license_key
-            - name: MEND_RNV_PLATFORM
-              value: github
-            - name: MEND_RNV_ENDPOINT
-              value: "https://api.github.com/"
-            - name: MEND_RNV_DATA_HANDLER_TYPE
-              value: "postgresql"
-            - name: PGDATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_database
-            - name: PGUSER
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_user
-            - name: PGPORT
-              value: "5432"
-            - name: PGHOST
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_host
-            - name: PGPASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: db_pg_password
-            - name: MEND_RNV_GITHUB_APP_ID
-              value: "938218"
-            - name: RNV_GITHUB_PEM_FILE_PATH
-              value: "/usr/src/app/rpi5-cluster-renovate.2024-07-05.private-key.pem"
-            - name: MEND_RNV_WEBHOOK_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: github_app_webhook_secret
-            - name: MEND_RNV_ADMIN_API_ENABLED
-              value: "true"
-            - name: MEND_RNV_SERVER_API_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: server_api_secret
-            - name: GITHUB_COM_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: renovate-secrets
-                  key: github_pat
-            - name: MEND_RNV_AUTODISCOVER_FILTER
-              value: "resources/*,infrastructures/*,apps/*"
-            - name: MEND_RNV_ENQUEUE_JOBS_ON_STARTUP
-              value: "enabled"
-            - name: MEND_RNV_LOG_HISTORY_DIR
-              value: "/logs"
-          ports:
-            - name: http
-              containerPort: 8080
-              protocol: TCP
-          livenessProbe:
-            initialDelaySeconds: 2
-            httpGet:
-              path: /health
-              port: http
-            periodSeconds: 10
-            timeoutSeconds: 1
-            failureThreshold: 3
-            successThreshold: 1
-          readinessProbe:
-            httpGet:
-              path: /health
-              port: http
-            periodSeconds: 10
-            timeoutSeconds: 1
-            failureThreshold: 3
-            successThreshold: 1
-          volumeMounts:
-            - name: renovate-config-js-volume
-              mountPath: /usr/src/app/config.js
-              subPath: config.js
-            - name: renovate-cache-volume
-              mountPath: /tmp/renovate
-            - name: renovate-logs
-              mountPath: /logs
-            - name: renovate-gh-app-pem
-              mountPath: /usr/src/app/renovate.private-key.pem
-      volumes:
-        - name: renovate-config-js-volume
-          configMap:
-            name: renovate-config-js
-        - name: renovate-cache-volume
-          emptyDir: {}
-        - name: renovate-logs
-          hostPath:
-            path: /mnt/nfs/AppData/renovate/logs
-            type: Directory
-        - name: renovate-gh-app-pem
-          hostPath:
-            path: /mnt/nfs/AppData/renovate/key/rpi5-cluster-renovate.2024-07-05.private-key.pem
-            type: File
-      nodeSelector:
-        kubernetes.io/arch: amd64

infrastructures/renovate/base/kustomization.yaml

@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources:
-  - configmap.yaml
-  - deployment.yaml
-  - service.yaml
+helmCharts:
+  - name: mend-renovate-ce
+    repo: https://mend.github.io/renovate-ce-ee
+    version: 7.6.0
+    releaseName: mend-renovate-ce
+    valuesFile: values.yaml

infrastructures/renovate/base/service.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: renovate
-  namespace: renovate
-  labels:
-    app.kubernetes.io/name: renovate
-spec:
-  type: ClusterIP
-  ports:
-    - port: 8899
-      targetPort: 8080
-      protocol: TCP
-      name: 8899-tcp
-  selector:
-    app.kubernetes.io/name: renovate

infrastructures/renovate/base/values.yaml

@@ -0,0 +1,39 @@
+renovate:
+  mendRnvAcceptTos: "y"
+  mendRnvPlatform: "github"
+  mendRnvEndpoint: "https://api.github.com/"
+  mendRnvAdminApiEnabled: "true"
+  existingSecret: "renovate-secrets"
+  mendRnvAutoDiscoverFilter: ""
+  mendRnvLogHistoryDir: "/logs"
+postgresql:
+  enabled: true
+  host: "postgresql-primary.argocd.svc.cluster.local"
+  port: 5432
+  database: renovate
+  user: renovate_user
+cachePersistence:
+  enabled: true
+  storageClass: "local-path"
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
+  existingClaim: "renovate-pvc"
+service:
+  type: ClusterIP
+  port: 80
+ingress:
+  enabled: true
+  ingressClassName: nginx
+  hosts:
+    - renovate.cluster.edward.sydney
+nodeSelector:
+  kubernetes.io/arch: amd64
+extraVolumes:
+  - name: logs
+    hostPath:
+      path: /mnt/nfs/AppData/renovate/logs
+      type: Directory
+extraVolumeMounts:
+  - name: logs
+    mountPath: /logs