feat: add renovate helm deployment

k8s/argo-apps/renovate.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: renovate
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-fuku
+    server: https://kubernetes.default.svc
+  project: fuku
+  sources:
+    - chart: renovate
+      repoURL: https://docs.renovatebot.com/helm-charts
+      targetRevision: 36.67.*
+      helm:
+        valuesObject:
+          renovate:
+            persistence:
+              cache:
+                enabled: true
+                storageClass: truenas-nfs-csi
+            config: |
+              {
+                "platform": "gitea",
+                "endpoint": "https://git.roboces.dev/api/v1",
+                "gitAuthor": "Renovate Bot <renovate-bot@fukurokuju.dev>",
+                "autodiscover": true
+              }
+          existingSecret: secrets-renovate
+
+    - repoURL: https://git.roboces.dev/catalin/fukuops.git
+      path: k8s/services/renovate
+      targetRevision: main
+  syncPolicy:
+    automated: {}

k8s/services/argo/project-fuku.yaml

@@ -24,3 +24,4 @@ spec:
         - https://charts.bitnami.com/bitnami
         - https://charts.crystalnet.org
         - https://portainer.github.io/k8s/
+        - https://docs.renovatebot.com/helm-charts

k8s/services/renovate/sealedsecrets.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: secrets-renovate
+  namespace: apps-fuku
+spec:
+  encryptedData:
+    RENOVATE_TOKEN: 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  # yamllint disable rule:line-length
+  template:
+    metadata:
+      creationTimestamp: null
+      name: secrets-renovate
+      namespace: apps-fuku