From 29f85d3621597bb75465996dcfbf6fcca5ba79c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?c=C4=83t=C4=83lin?= <catalin@roboces.dev>
Date: Thu, 5 Sep 2024 12:46:28 +0200
Subject: [PATCH] feat: add renovate helm deployment

---
 k8s/argo-apps/renovate.yaml              | 37 ++++++++++++++++++++++++
 k8s/services/argo/project-fuku.yaml      |  1 +
 k8s/services/renovate/sealedsecrets.yaml | 15 ++++++++++
 3 files changed, 53 insertions(+)
 create mode 100644 k8s/argo-apps/renovate.yaml
 create mode 100644 k8s/services/renovate/sealedsecrets.yaml

diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml
new file mode 100644
index 0000000..4111526
--- /dev/null
+++ b/k8s/argo-apps/renovate.yaml
@@ -0,0 +1,37 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: renovate
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-fuku
+    server: https://kubernetes.default.svc
+  project: fuku
+  sources:
+    - chart: renovate
+      repoURL: https://docs.renovatebot.com/helm-charts
+      targetRevision: 36.67.*
+      helm:
+        valuesObject:
+          renovate:
+            persistence:
+              cache:
+                enabled: true
+                storageClass: truenas-nfs-csi
+            config: |
+              {
+                "platform": "gitea",
+                "endpoint": "https://git.roboces.dev/api/v1",
+                "gitAuthor": "Renovate Bot <renovate-bot@fukurokuju.dev>",
+                "autodiscover": true
+              }
+          existingSecret: secrets-renovate
+
+    - repoURL: https://git.roboces.dev/catalin/fukuops.git
+      path: k8s/services/renovate
+      targetRevision: main
+  syncPolicy:
+    automated: {}
diff --git a/k8s/services/argo/project-fuku.yaml b/k8s/services/argo/project-fuku.yaml
index 2e6aea3..eb048ca 100644
--- a/k8s/services/argo/project-fuku.yaml
+++ b/k8s/services/argo/project-fuku.yaml
@@ -24,3 +24,4 @@ spec:
         - https://charts.bitnami.com/bitnami
         - https://charts.crystalnet.org
         - https://portainer.github.io/k8s/
+        - https://docs.renovatebot.com/helm-charts
diff --git a/k8s/services/renovate/sealedsecrets.yaml b/k8s/services/renovate/sealedsecrets.yaml
new file mode 100644
index 0000000..420dd5e
--- /dev/null
+++ b/k8s/services/renovate/sealedsecrets.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: secrets-renovate
+  namespace: apps-fuku
+spec:
+  encryptedData:
+    RENOVATE_TOKEN: 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  # yamllint disable rule:line-length
+  template:
+    metadata:
+      creationTimestamp: null
+      name: secrets-renovate
+      namespace: apps-fuku