Move renovate config to file, use renovate-full image

k8s/forgejo/kustomization.yaml

@@ -13,3 +13,6 @@ configMapGenerator:
   - name: forgejo-templates-base
     files:
       - forgejo-templates-base/head_navbar.tmpl
+  - name: renovate-config
+    files:
+      - renovate/config.js

k8s/forgejo/renovate/config.js

@@ -0,0 +1,10 @@
+module.exports = {
+    autodiscover: true,
+    endpoint: 'https://git.janky.solutions',
+    gitAuthor: 'Renovate Bot <renovatebot@janky.solutions>',
+    platform: 'gitea',
+    allowScripts: true,
+    allowedPostUpgradeCommands: [
+        ".*"
+    ]
+};

k8s/forgejo/renovatebot.yaml

@@ -11,21 +11,18 @@ spec:
         spec:
           containers:
             - name: renovate
-              image: renovate/renovate:38
+              image: renovate/renovate:38.121-full
+              env:
+                - name: RENOVATE_CONFIG_FILE
+                  value: /etc/renovate/config.js
               envFrom:
                 - secretRef:
                     name: renovate
-                - configMapRef:
-                    name: renovate
+              volumeMounts:
+                - name: renovate-config
+                  mountPath: /etc/renovate
           restartPolicy: Never
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: renovate
-data:
-  RENOVATE_AUTODISCOVER: 'true'
-  RENOVATE_ENDPOINT: 'https://git.janky.solutions'
-  RENOVATE_GIT_AUTHOR: 'Renovate Bot <renovatebot@janky.solutions>'
-  RENOVATE_PLATFORM: gitea
-  RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: docker run --rm -v $(pwd):/infra -w /infra git.devhack.net/devhack/containers/deployer:latest -- ./helm/render-all.sh
+          volumes:
+            - name: renovate-config
+              configMap:
+                name: renovate-config

renovate.json

@@ -10,9 +10,9 @@
   },
   "postUpgradeTasks": {
     "commands": [
-      "docker run --rm -v $(pwd):/infra -w /infra git.devhack.net/devhack/containers/deployer:latest -- ./helm/render-all.sh"
+      "./helm/render-all.sh"
     ],
-    "fileFilters": [
+    "fileMatch": [
       "helm/**"
     ],
     "executionMode": "update"