diff --git a/docs/REFERENCE.md b/docs/REFERENCE.md index 837a0d4..22bdfc4 100644 --- a/docs/REFERENCE.md +++ b/docs/REFERENCE.md @@ -943,7 +943,7 @@ kubectl get secret -n -o yaml ```yaml # infra/renovate.yaml + infra/values/renovate-values.yaml cronjob: - schedule: "@hourly" + schedule: "@daily" concurrencyPolicy: Forbid renovate: @@ -952,12 +952,24 @@ renovate: endpoint: https://git.forteapps.net autodiscover: true gitAuthor: "Renovate Bot " + packageRules: + - matchRepositories: ["**/10x"] + assignees: ["edvard.unsvag"] + reviewers: ["edvard.unsvag"] + - matchRepositories: ["**/auth-sidecar"] + assignees: ["danijel.simeunovic"] + reviewers: ["danijel.simeunovic"] + - matchRepositories: ["**/forte-helm"] + assignees: ["danijel.simeunovic"] + reviewers: ["danijel.simeunovic"] resources: - requests: { cpu: 250m, memory: 512Mi } - limits: { cpu: "1", memory: 1Gi } + requests: { cpu: 500m, memory: 1Gi } + limits: { cpu: "2", memory: 4Gi } ``` +**Note**: Assignees and reviewers are only applied at PR creation time. Existing PRs must be closed and recreated for new assignment rules to take effect. + **Secrets**: `renovate-env` (SealedSecret in `secrets` namespace, cloned by Kyverno) containing: - `RENOVATE_TOKEN` — Gitea PAT with repo write + issue write permissions - `RENOVATE_GITHUB_COM_TOKEN` — GitHub PAT (public_repo read-only) for changelog fetching diff --git a/infra/values/renovate-values.yaml b/infra/values/renovate-values.yaml index 11e2391..1525383 100644 --- a/infra/values/renovate-values.yaml +++ b/infra/values/renovate-values.yaml @@ -13,15 +13,18 @@ renovate: "packageRules": [ { "matchRepositories": ["**/10x"], - "assignees": ["edvard.unsvag"] + "assignees": ["edvard.unsvag"], + "reviewers": ["edvard.unsvag"] }, { "matchRepositories": ["**/auth-sidecar"], - "assignees": ["danijel.simeunovic"] + "assignees": ["danijel.simeunovic"], + "reviewers": ["danijel.simeunovic"] }, { "matchRepositories": ["**/forte-helm"], - "assignees": ["danijel.simeunovic"] + "assignees": ["danijel.simeunovic"], + "reviewers": ["danijel.simeunovic"] } ] } @@ -31,7 +34,7 @@ envFrom: name: renovate-env env: - LOG_LEVEL: info + LOG_LEVEL: debug resources: requests: