From 18167e7bc329590da0b826f56af151fcda703c83 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Mon, 14 Sep 2026 10:51:40 +0200
Subject: [PATCH] ci: validate Renovate manifests with kubeconform

---
 .gitea/workflows/renovate-ci.yaml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/renovate-ci.yaml b/.gitea/workflows/renovate-ci.yaml
index 2639963..a86f372 100644
--- a/.gitea/workflows/renovate-ci.yaml
+++ b/.gitea/workflows/renovate-ci.yaml
@@ -30,9 +30,16 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          for manifest in renovate/k8s/namespace.yaml renovate/k8s/configmap.yaml renovate/k8s/cronjob.yaml; do
-            kubectl apply --dry-run=client --validate=false -f "$manifest" >/dev/null
-          done
+          docker run --rm \
+            -v "$PWD:/work" \
+            -w /work \
+            ghcr.io/yannh/kubeconform:latest \
+            -strict \
+            -ignore-missing-schemas \
+            -summary \
+            renovate/k8s/namespace.yaml \
+            renovate/k8s/configmap.yaml \
+            renovate/k8s/cronjob.yaml
 
       - name: Validate Renovate repository config
         shell: bash