From 4866fdba9a0b3d272d70af526a5993c54fd0ca33 Mon Sep 17 00:00:00 2001
From: Steven Kreitzer <skre@skre.me>
Date: Mon, 16 Dec 2024 10:38:29 -0600
Subject: [PATCH] chore(renovate): cnpg pin digest

---
 .github/renovate/customManagers.json5                      | 7 +++----
 .github/renovate/packageRules.json5                        | 7 ++++---
 .../apps/databases/cloudnative-pg/cluster/cluster.yaml     | 2 +-
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/renovate/customManagers.json5 b/.github/renovate/customManagers.json5
index 2068904388..e93811a2be 100644
--- a/.github/renovate/customManagers.json5
+++ b/.github/renovate/customManagers.json5
@@ -3,7 +3,7 @@
   customManagers: [
     {
       customType: "regex",
-      description: ["Process custom dependencies"],
+      description: ["Process YAML custom dependencies"],
       fileMatch: [
         "(^|/).taskfiles/.+\\.ya?ml$",
         "(^|/)talos/.+\\.ya?ml$",
@@ -21,11 +21,10 @@
     },
     {
       customType: "regex",
-      description: ["Process CloudnativePG Postgresql version"],
+      description: ["Process any imageName keys in YAML files (cloudnative-pg)"],
       fileMatch: ["(^|/)kubernetes/.+\\.ya?ml$"],
-      matchStrings: ["imageName: (?<depName>\\S+):(?<currentValue>\\S+)"],
+      matchStrings: ["imageName: (?<depName>\\S+):(?<currentValue>\\S+)@(?<currentDigest>\\S+)"],
       datasourceTemplate: "docker",
-      versioningTemplate: "redhat",
     },
   ],
 }
diff --git a/.github/renovate/packageRules.json5 b/.github/renovate/packageRules.json5
index 216264a146..430c87c387 100644
--- a/.github/renovate/packageRules.json5
+++ b/.github/renovate/packageRules.json5
@@ -8,10 +8,11 @@
       matchPackagePatterns: ["plex"],
     },
     {
-      description: ["Custom schedule for frequently updated packages"],
-      matchDatasources: ["docker", "helm"],
-      schedule: ["on the first day of the month"],
+      description: ["Custom schedule for frequently updated container digests"],
+      matchDatasources: ["docker"],
       matchPackagePatterns: ["postgresql"],
+      matchUpdateTypes: ["digest"],
+      schedule: ["every 3 months on the first day of the month"]
     },
   ],
 }
diff --git a/kubernetes/apps/databases/cloudnative-pg/cluster/cluster.yaml b/kubernetes/apps/databases/cloudnative-pg/cluster/cluster.yaml
index cfb62b86de..a0bb6b1f4f 100644
--- a/kubernetes/apps/databases/cloudnative-pg/cluster/cluster.yaml
+++ b/kubernetes/apps/databases/cloudnative-pg/cluster/cluster.yaml
@@ -5,7 +5,7 @@ metadata:
   name: postgres
 spec:
   instances: 3
-  imageName: ghcr.io/cloudnative-pg/postgresql:17.2-7
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.2@sha256:1a2cb954a8f97ab9bd4a5ca7c51d90739cfa7db4d1e7a3de72221bc7e2305c9f
   primaryUpdateStrategy: unsupervised
   storage:
     size: 20Gi