-
Notifications
You must be signed in to change notification settings - Fork 891
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: Added Renovate to auto update helm-values and github-actions (#979
- Loading branch information
1 parent
c60cc57
commit e2c1450
Showing
32 changed files
with
3,625 additions
and
4,341 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,80 @@ | ||
{ | ||
$schema: "https://docs.renovatebot.com/renovate-schema.json", | ||
onboarding: false, | ||
requireConfig: "ignored", | ||
platform: "github", | ||
repositories: ["jenkinsci/helm-charts"], | ||
allowedPostUpgradeCommands: ["^\.github\/renovate-postupgrade\.sh {{{depName}}} {{{newVersion}}}$"], | ||
prConcurrentLimit: 0, | ||
semanticCommits: "enabled", | ||
enabledManagers: [ | ||
"helm-values", | ||
"github-actions", | ||
"regex", | ||
], | ||
packageRules: [ | ||
{ | ||
matchDepNames: ["jenkins/inbound-agent"], | ||
versioning: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?_(?<patch>\\w+)?-(?<build>\\d+)?$", | ||
}, | ||
{ | ||
matchDepNames: ["jenkins/jenkins"], | ||
versioning: "regex:^(?<major>\\d+?)\\.(?<minor>\\d+?)\\.(?<patch>\\d+?)(-(?<compatibility>\\w+))?$", | ||
}, | ||
{ | ||
matchFileNames: ["charts/jenkins/**"], | ||
postUpgradeTasks: { | ||
commands: [ | ||
".github/renovate-postupgrade.sh {{{depName}}} {{{newVersion}}}", | ||
], | ||
fileFilters: ["charts/jenkins/**"], | ||
executionMode: "branch", | ||
}, | ||
}, | ||
], | ||
customManagers: [ | ||
{ | ||
customType: "regex", | ||
fileMatch: ["(^|/)\\.github/workflows/[^/]+\\.ya?ml$", "(^|/)\\.github/[^/]+\\.sh$"], | ||
matchStrings: [ | ||
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s+?[\\w\\s-]*?version:? (?<currentValue>.*)\\s", | ||
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\sENV .*?_VERSION=(?<currentValue>.*)\\s", | ||
], | ||
}, | ||
{ | ||
customType: "regex", | ||
fileMatch: [ | ||
"^charts/jenkins/Chart.yaml$", | ||
"^charts/jenkins/values.yaml$", | ||
], | ||
matchStrings: [ | ||
"appVersion: (?<currentValue>.*?)\\s", | ||
'repository: \\"jenkins/jenkins\\"\\s*?# tag: \\"(?<currentValue>.*?)\\"', | ||
], | ||
depNameTemplate: "jenkins/jenkins", | ||
datasourceTemplate: "docker", | ||
}, | ||
{ | ||
customType: "regex", | ||
fileMatch: ["^charts/jenkins/values.yaml$"], | ||
matchStringsStrategy: "recursive", | ||
matchStrings: [ | ||
"installPlugins:[\\s\\w:.-]*?(?:\\r*\\n){2}", | ||
"- (?<depName>.*?):(?<currentValue>.*?)\\s", | ||
], | ||
datasourceTemplate: "jenkins-plugins", | ||
versioningTemplate: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?(\\.(?<patch>\\d+?))?$", | ||
}, | ||
{ | ||
customType: "regex", | ||
fileMatch: ["^charts/jenkins/Chart.yaml$"], | ||
matchStringsStrategy: "recursive", | ||
matchStrings: [ | ||
"artifacthub\\.io\\/images: \\|[\\s\\w:.\\/-]*(?:artifacthub)", | ||
"image: (?<depName>.*?):(?<currentValue>.*?)\\s", | ||
], | ||
datasourceTemplate: "docker", | ||
versioningTemplate: "regex:^(?<major>\\d+)?\\.(?<minor>\\w+?)?(_|\\.)(?<patch>\\w+)?(-(?<build>\\d+))?.*", | ||
}, | ||
], | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,34 @@ | ||
#!/bin/bash | ||
|
||
# renovate: datasource=github-tags depName=mikefarah/yq | ||
export YQ_VERSION=v4.40.5 | ||
|
||
# renovate: datasource=github-tags depName=helm/helm | ||
export HELM_VERSION=v3.14.0 | ||
|
||
# renovate: datasource=github-tags depName=helm-unittest/helm-unittest | ||
export HELM_UNITTEST_VERSION=v0.3.6 | ||
|
||
# renovate: datasource=github-tags depName=jenkins-x-plugins/jx-release-version | ||
export JENKINS_JX_VERSION=v2.7.3 | ||
|
||
apt update | ||
|
||
apt install -y curl git | ||
|
||
curl -fsSL -o /tmp/helm.tar.gz https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz | ||
mkdir -p /tmp/helm && tar -xf /tmp/helm.tar.gz -C /tmp/helm | ||
mv /tmp/helm/linux-amd64/helm /usr/local/bin/helm | ||
chmod a+x /usr/local/bin/helm | ||
|
||
runuser -u ubuntu -- helm plugin install https://github.com/helm-unittest/helm-unittest --version ${HELM_UNITTEST_VERSION} | ||
|
||
curl -fsSL -o /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64 | ||
chmod a+x /usr/local/bin/yq | ||
|
||
curl -fsSL -o /tmp/jx-release.tar.gz https://github.com/jenkins-x-plugins/jx-release-version/releases/download/${JENKINS_JX_VERSION}/jx-release-version-linux-amd64.tar.gz | ||
mkdir -p /tmp/jx && tar -xf /tmp/jx-release.tar.gz -C /tmp/jx | ||
mv /tmp/jx/jx-release-version /usr/local/bin/jx-release-version | ||
chmod a+x /usr/local/bin/jx-release-version | ||
|
||
runuser -u ubuntu renovate |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,10 @@ | ||
#!/bin/bash | ||
|
||
CHARTVERSION="$(jx-release-version -previous-version=from-file:charts/jenkins/Chart.yaml)" | ||
export CHARTVERSION | ||
export DEPNAME="$1" | ||
export NEWVERSION="$2" | ||
|
||
helm unittest --strict -f 'unittests/*.yaml' charts/jenkins -u | ||
yq eval '.version = env(CHARTVERSION)' -i charts/jenkins/Chart.yaml | ||
sed -i "/git commit to be able to get more details./a \\\n## ${CHARTVERSION}\n\nUpdate \`${DEPNAME}\` to version \`${NEWVERSION}\`" charts/jenkins/CHANGELOG.md |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
name: Renovate | ||
on: | ||
schedule: | ||
- cron: "0/15 * * * *" | ||
workflow_dispatch: | ||
|
||
jobs: | ||
renovate: | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Get token | ||
id: get_token | ||
uses: tibdex/github-app-token@v2 | ||
with: | ||
app_id: ${{ secrets.JENKINS_DEPENDENCY_UPDATER_APP_ID }} | ||
private_key: ${{ secrets.JENKINS_DEPENDENCY_UPDATER_PRIVATE_KEY }} | ||
|
||
- name: Checkout | ||
uses: actions/checkout@v4 | ||
|
||
- name: Self-hosted Renovate | ||
uses: renovatebot/[email protected] | ||
with: | ||
token: "${{ steps.get_token.outputs.token }}" | ||
docker-cmd-file: .github/renovate-entrypoint.sh | ||
docker-user: root | ||
configurationFile: .github/renovate-config.json5 | ||
env: | ||
LOG_LEVEL: 'debug' |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.