forust
cda0022d81
ci / lint-compose (push) Successful in 5s
ci / lint-actionlint (push) Successful in 2s
ci / lint-shellcheck (push) Successful in 2s
ci / lint-prettier (push) Successful in 4s
ci / lint-ruff (push) Successful in 2s
ci / lint-yaml (push) Successful in 3s
ci / lint-dockerfiles (push) Successful in 3s
ci / scan-deps (push) Successful in 17s
ci / test-backend (push) Successful in 7s
ci / test-frontend (push) Successful in 12s
ci / validate (push) Successful in 5s
renovate-ci / validate-renovate (push) Successful in 9m17s
ci / build (push) Failing after 28m20s
History limits never delete manual 'create job --from' runs, so Failed pods accumulated for a week. Keep a day for debugging, reap the rest.
62 lines
2.0 KiB
YAML
62 lines
2.0 KiB
YAML
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: renovate
|
|
namespace: renovate
|
|
spec:
|
|
schedule: "17 */6 * * *"
|
|
concurrencyPolicy: Forbid
|
|
successfulJobsHistoryLimit: 2
|
|
failedJobsHistoryLimit: 3
|
|
jobTemplate:
|
|
spec:
|
|
# Reap finished job pods (including manual `create job --from` runs,
|
|
# which history limits never delete). Keeps a day for debugging.
|
|
ttlSecondsAfterFinished: 86400
|
|
backoffLimit: 1
|
|
template:
|
|
spec:
|
|
restartPolicy: Never
|
|
containers:
|
|
- name: renovate
|
|
image: renovate/renovate:44.115.9
|
|
env:
|
|
- name: RENOVATE_PLATFORM
|
|
value: gitea
|
|
- name: RENOVATE_ENDPOINT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: renovate-secrets
|
|
key: RENOVATE_ENDPOINT
|
|
- name: RENOVATE_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: renovate-secrets
|
|
key: RENOVATE_TOKEN
|
|
- name: RENOVATE_REPOSITORIES
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: renovate-secrets
|
|
key: RENOVATE_REPOSITORIES
|
|
- name: RENOVATE_CONFIG_FILE
|
|
value: /opt/renovate/renovate.json
|
|
- name: RENOVATE_BASE_DIR
|
|
value: /tmp/renovate
|
|
- name: RENOVATE_GITHUB_COM_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: renovate-secrets
|
|
key: RENOVATE_GITHUB_COM_TOKEN
|
|
optional: true
|
|
- name: LOG_LEVEL
|
|
value: info
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /opt/renovate/renovate.json
|
|
subPath: renovate.json
|
|
readOnly: true
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: renovate-config
|