---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: renovate-infrastructure
  namespace: gitops
spec:
  schedule: '@hourly'
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      template:
        spec:
          volumes:
              - name: config-volume
                configMap:
                  name: renovate-config
              - name: work-volume
                emptyDir: {}
          containers:
            - name: renovate
              image: renovate/renovate:32.64
              volumeMounts:
                - name: config-volume
                  mountPath: /opt/renovate/
                - name: work-volume
                  mountPath: /tmp/renovate/
              env:
                - name: LOG_LEVEL
                  value: debug
                - name: RENOVATE_ENDPOINT
                  value: 'https://git.0x76.dev/api/v1/'
                - name: RENOVATE_PLATFORM
                  value: gitea
                - name: RENOVATE_AUTODISCOVER
                  value: 'false'
                - name: RENOVATE_GIT_AUTHOR
                  value: 'Renovate Bot <renovate@xirion.net>'
                - name: RENOVATE_CONFIG_FILE
                  value: '/opt/renovate/config.json'
                - name: RENOVATE_BASE_DIR
                  value: '/tmp/renovate'
              envFrom:
                - secretRef:
                    name: renovate
          restartPolicy: Never
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: renovate-config
  namespace: gitops
data:
  config.json: |-
    {
      "extends": ["github>whitesource/merge-confidence:beta"],
      "repositories": ["v/infrastructure"],
      "flux": {
        "fileMatch": ["flux/.+\\.yaml$"]
      },
      "helm-values": {
        "fileMatch": ["flux/.+\\.yaml$"]
      },
      "kubernetes": {
        "fileMatch": ["flux/.+\\.yaml$"]
      }
    }