This commit is contained in:
@@ -943,7 +943,7 @@ kubectl get secret <name> -n <namespace> -o yaml
|
|||||||
```yaml
|
```yaml
|
||||||
# infra/renovate.yaml + infra/values/renovate-values.yaml
|
# infra/renovate.yaml + infra/values/renovate-values.yaml
|
||||||
cronjob:
|
cronjob:
|
||||||
schedule: "@hourly"
|
schedule: "@daily"
|
||||||
concurrencyPolicy: Forbid
|
concurrencyPolicy: Forbid
|
||||||
|
|
||||||
renovate:
|
renovate:
|
||||||
@@ -952,12 +952,24 @@ renovate:
|
|||||||
endpoint: https://git.forteapps.net
|
endpoint: https://git.forteapps.net
|
||||||
autodiscover: true
|
autodiscover: true
|
||||||
gitAuthor: "Renovate Bot <renovate@forteapps.net>"
|
gitAuthor: "Renovate Bot <renovate@forteapps.net>"
|
||||||
|
packageRules:
|
||||||
|
- matchRepositories: ["**/10x"]
|
||||||
|
assignees: ["edvard.unsvag"]
|
||||||
|
reviewers: ["edvard.unsvag"]
|
||||||
|
- matchRepositories: ["**/auth-sidecar"]
|
||||||
|
assignees: ["danijel.simeunovic"]
|
||||||
|
reviewers: ["danijel.simeunovic"]
|
||||||
|
- matchRepositories: ["**/forte-helm"]
|
||||||
|
assignees: ["danijel.simeunovic"]
|
||||||
|
reviewers: ["danijel.simeunovic"]
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
requests: { cpu: 250m, memory: 512Mi }
|
requests: { cpu: 500m, memory: 1Gi }
|
||||||
limits: { cpu: "1", memory: 1Gi }
|
limits: { cpu: "2", memory: 4Gi }
|
||||||
```
|
```
|
||||||
|
|
||||||
|
**Note**: Assignees and reviewers are only applied at PR creation time. Existing PRs must be closed and recreated for new assignment rules to take effect.
|
||||||
|
|
||||||
**Secrets**: `renovate-env` (SealedSecret in `secrets` namespace, cloned by Kyverno) containing:
|
**Secrets**: `renovate-env` (SealedSecret in `secrets` namespace, cloned by Kyverno) containing:
|
||||||
- `RENOVATE_TOKEN` — Gitea PAT with repo write + issue write permissions
|
- `RENOVATE_TOKEN` — Gitea PAT with repo write + issue write permissions
|
||||||
- `RENOVATE_GITHUB_COM_TOKEN` — GitHub PAT (public_repo read-only) for changelog fetching
|
- `RENOVATE_GITHUB_COM_TOKEN` — GitHub PAT (public_repo read-only) for changelog fetching
|
||||||
|
|||||||
@@ -13,15 +13,18 @@ renovate:
|
|||||||
"packageRules": [
|
"packageRules": [
|
||||||
{
|
{
|
||||||
"matchRepositories": ["**/10x"],
|
"matchRepositories": ["**/10x"],
|
||||||
"assignees": ["edvard.unsvag"]
|
"assignees": ["edvard.unsvag"],
|
||||||
|
"reviewers": ["edvard.unsvag"]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"matchRepositories": ["**/auth-sidecar"],
|
"matchRepositories": ["**/auth-sidecar"],
|
||||||
"assignees": ["danijel.simeunovic"]
|
"assignees": ["danijel.simeunovic"],
|
||||||
|
"reviewers": ["danijel.simeunovic"]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"matchRepositories": ["**/forte-helm"],
|
"matchRepositories": ["**/forte-helm"],
|
||||||
"assignees": ["danijel.simeunovic"]
|
"assignees": ["danijel.simeunovic"],
|
||||||
|
"reviewers": ["danijel.simeunovic"]
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
@@ -31,7 +34,7 @@ envFrom:
|
|||||||
name: renovate-env
|
name: renovate-env
|
||||||
|
|
||||||
env:
|
env:
|
||||||
LOG_LEVEL: info
|
LOG_LEVEL: debug
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
|
|||||||
Reference in New Issue
Block a user