Feature Proposal: Automatically update helm chart dependencies

[koeberlue]

Manually keeping all dependencies up to date can be a time consuming task which can easily be automated.

One possible solution for this is renovatebot which periodically checks for new versions and can create a pull request for each update found.

It can easily be deployed on kubernetes via helm and works with gitea out of the box.

[khuedoan]

Running Renovate manually and it's working, now I need to put it in a Job or Pipeline

d6a8495

[koeberlue]

Nice!

now I need to put it in a Job or Pipeline

You could use the official helm chart for this:
https://github.com/renovatebot/helm-charts

It will deploy a kubernetes CronJob which just executes the bot at configurable intervals.

[khuedoan]

I tried that before but I reverted it, feels a bit weird. Anyway I'll play with it again to see which one is better.

[khuedoan]

This will need #20 #21 in the long term, but right now I'll just create the token and secret using the existing Python script.

[khuedoan]

The Helm chart is working (a long debug session led me to this fix 983c8de), however the following steps will need to be automated:

• Register an account for the bot with user name, full name, email address
• Create access token
• Put the access token to a Secret (right now I just hard code a test token)
• Add the bot to the repository (or all repository)

[khuedoan]

Unfortunately, there is no way to generate a Gitea token with a specific value, so we must generate a token by hand and store it in Vault:

homelab/platform/renovate/templates/secret.yaml

Lines 18 to 19 in 4e8de63

	key: /gitea/renovate
	property: token

It can be automated by generating the token from Gitea side, get the output and put it in to Vault, I've got it to work but it's kind of a mess.