This commit is contained in:
@@ -943,7 +943,7 @@ kubectl get secret <name> -n <namespace> -o yaml
|
||||
```yaml
|
||||
# infra/renovate.yaml + infra/values/renovate-values.yaml
|
||||
cronjob:
|
||||
schedule: "@hourly"
|
||||
schedule: "@daily"
|
||||
concurrencyPolicy: Forbid
|
||||
|
||||
renovate:
|
||||
@@ -952,12 +952,24 @@ renovate:
|
||||
endpoint: https://git.forteapps.net
|
||||
autodiscover: true
|
||||
gitAuthor: "Renovate Bot <renovate@forteapps.net>"
|
||||
packageRules:
|
||||
- matchRepositories: ["**/10x"]
|
||||
assignees: ["edvard.unsvag"]
|
||||
reviewers: ["edvard.unsvag"]
|
||||
- matchRepositories: ["**/auth-sidecar"]
|
||||
assignees: ["danijel.simeunovic"]
|
||||
reviewers: ["danijel.simeunovic"]
|
||||
- matchRepositories: ["**/forte-helm"]
|
||||
assignees: ["danijel.simeunovic"]
|
||||
reviewers: ["danijel.simeunovic"]
|
||||
|
||||
resources:
|
||||
requests: { cpu: 250m, memory: 512Mi }
|
||||
limits: { cpu: "1", memory: 1Gi }
|
||||
requests: { cpu: 500m, memory: 1Gi }
|
||||
limits: { cpu: "2", memory: 4Gi }
|
||||
```
|
||||
|
||||
**Note**: Assignees and reviewers are only applied at PR creation time. Existing PRs must be closed and recreated for new assignment rules to take effect.
|
||||
|
||||
**Secrets**: `renovate-env` (SealedSecret in `secrets` namespace, cloned by Kyverno) containing:
|
||||
- `RENOVATE_TOKEN` — Gitea PAT with repo write + issue write permissions
|
||||
- `RENOVATE_GITHUB_COM_TOKEN` — GitHub PAT (public_repo read-only) for changelog fetching
|
||||
|
||||
Reference in New Issue
Block a user