renovate: v/infrastructure (?)

flux/cluster/apps/gitops/renovate/external-secret.yaml

@@ -1,7 +1,7 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: authentik
+  name: renovate
   namespace: gitops
 spec:
   refreshInterval: "5m"

flux/cluster/apps/gitops/renovate/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - external-secret.yaml
+  - renovate-infrastructure.yaml

flux/cluster/apps/gitops/renovate/renovate-infrastructure.yaml

@@ -0,0 +1,62 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate-infrastructure
+  namespace: gitops
+spec:
+  schedule: '@hourly'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          volumes:
+              - name: config-volume
+                configMap:
+                  name: renovate-config
+              - name: work-volume
+                emptyDir: {}
+          containers:
+            - name: renovate
+              image: renovate/renovate:32.61
+              volumeMounts:
+                - name: config-volume
+                  mountPath: /opt/renovate/
+                - name: work-volume
+                  mountPath: /tmp/renovate/
+              env:
+                - name: LOG_LEVEL
+                  value: debug
+                - name: RENOVATE_ENDPOINT
+                  value: 'https://git.0x76.dev/api/v1/'
+                - name: RENOVATE_PLATFORM
+                  value: gitea
+                - name: RENOVATE_AUTODISCOVER
+                  value: 'false'
+                - name: RENOVATE_GIT_AUTHOR
+                  value: 'Renovate Bot <bot@renovateapp.com>'
+                - name: RENOVATE_CONFIG_FILE
+                  value: '/opt/renovate/config.json'
+                - name: RENOVATE_BASE_DIR
+                  value: '/tmp/renovate'
+              envFrom:
+                - secretRef:
+                    name: renovate
+          restartPolicy: Never
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-config
+data:
+  config.json: |-
+    {
+      "repositories": ["v/infrastructure"],
+      "flux": {
+        "fileMatch": ["flux/.+\\.yaml$"]
+      },
+      "kubernetes": {
+        "fileMatch": ["flux/.+\\.yaml$"]
+      }
+    }