apiVersion: batch/v1
kind: CronJob
metadata:
  name: renovate
  namespace: renovate
spec:
  schedule: "17 */6 * * *"
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: 2
  failedJobsHistoryLimit: 3
  jobTemplate:
    spec:
      # Reap finished job pods (including manual `create job --from` runs,
      # which history limits never delete). Keeps a day for debugging.
      ttlSecondsAfterFinished: 86400
      backoffLimit: 1
      template:
        spec:
          restartPolicy: Never
          containers:
            - name: renovate
              image: renovate/renovate:44.132.5
              env:
                - name: RENOVATE_PLATFORM
                  value: gitea
                - name: RENOVATE_ENDPOINT
                  valueFrom:
                    secretKeyRef:
                      name: renovate-secrets
                      key: RENOVATE_ENDPOINT
                - name: RENOVATE_TOKEN
                  valueFrom:
                    secretKeyRef:
                      name: renovate-secrets
                      key: RENOVATE_TOKEN
                - name: RENOVATE_REPOSITORIES
                  valueFrom:
                    secretKeyRef:
                      name: renovate-secrets
                      key: RENOVATE_REPOSITORIES
                - name: RENOVATE_CONFIG_FILE
                  value: /opt/renovate/renovate.json
                - name: RENOVATE_BASE_DIR
                  value: /tmp/renovate
                - name: RENOVATE_GITHUB_COM_TOKEN
                  valueFrom:
                    secretKeyRef:
                      name: renovate-secrets
                      key: RENOVATE_GITHUB_COM_TOKEN
                      optional: true
                - name: LOG_LEVEL
                  value: info
              volumeMounts:
                - name: config
                  mountPath: /opt/renovate/renovate.json
                  subPath: renovate.json
                  readOnly: true
          volumes:
            - name: config
              configMap:
                name: renovate-config