- apps/renovate: CronJob (daily 04:00, routine PRs Monday only via the shared preset's schedule), runner config, renovate-bot token ExternalSecret. - clusters/homelab/renovate.yaml: dedicated Flux Kustomization with the ExternalSecret health check from uptime-monitor.yaml. - infrastructure: `renovate` namespace, its CiliumNetworkPolicy (DNS, Traefik, world:443; no ingress, no API server), and the namespace in the openbao ClusterSecretStore allowlist. - renovate.json: extends local>k.renner/renovate-config. Managers flux, kubernetes, woodpecker, dockerfile. Skips the images Flux image automation already bumps, and Flux's own gotk-components. Digest pins and Cilium/Rook-Ceph minors get their own PRs. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
135 B
YAML
7 lines
135 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- externalsecret.yaml
|
|
- configmap.yaml
|
|
- cronjob.yaml
|