ci: renovate update

- add .renovate directory for extends - add more groups - add talos installer customManager
timtorChen · Jan 23, 2025 · cec24af · cec24af
1 parent ecf7c82
commit cec24af
Show file tree

Hide file tree

Showing 10 changed files with 150 additions and 66 deletions.
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
@@ -8,7 +8,7 @@ name: renovate
       - "main"
     paths:
       - "renovate.json5"
-      - "**/renovate.json5"
+      - ".renovate/**"
   schedule:
     - cron: "0 0 * * *" # every 08:00 UTC+8
 jobs:

diff --git a/.renovate/autoMerge.json5 b/.renovate/autoMerge.json5
@@ -0,0 +1,25 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "packageRules": [
+    {
+      "automerge": true,
+      "matchDepNames": [
+        "deluan/navidrome",
+        "ghcr.io/dani-garcia/vaultwarden",
+        "ghcr.io/immich-app/immich-**",
+        "cloudflare/cloudflared",
+        "matusnovak/prometheus-smartctl",
+        "jacobalberty/unifi",
+        "ghcr.io/unpoller/unpoller"
+      ],
+      "matchUpdateTypes": ["patch"],
+      "automergeType": "branch"
+    },
+    {
+      "automerge": true,
+      "matchDepNames": ["grafana"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "automergeType": "branch"
+    }
+  ]
+}
diff --git a/.renovate/customManagers.json5 b/.renovate/customManagers.json5
@@ -0,0 +1,14 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "customManagers": [
+    // talos installer
+    {
+      "customType": "regex",
+      "fileMatch": ["^talos/.*\\.yaml$"],
+      "datasourceTemplate": "docker",
+      "matchStrings": [
+        "# renovate: depName=(?<depName>.*?)\n *image: factory\\.talos\\.dev\/installer\/[a-z0-9]+:(?<currentValue>v[\\d\\.]+)"
+      ]
+    }
+  ]
+}
diff --git a/.renovate/groups.json5 b/.renovate/groups.json5
@@ -0,0 +1,76 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "packageRules": [
+    // talos
+    {
+      "groupName": "talos",
+      "matchFileNames": ["kubernetes/**", "talos/**"],
+      "matchDatasources": "docker",
+      "matchDepNames": [
+        "ghcr.io/siderolabs/talosctl",
+        "ghcr.io/siderolabs/installer"
+      ],
+      "separateMultipleMinor": true
+    },
+    // kubernetes
+    {
+      "groupName": "kubernetes",
+      "matchFileNames": ["talos/**"],
+      "matchDatasources": "docker",
+      "matchDepNames": [
+        "ghcr.io/siderolabs/kubelet",
+        "registry.k8s.io/kube-apiserver",
+        "registry.k8s.io/kube-controller-manager",
+        "registry.k8s.io/kube-scheduler"
+      ],
+      "separateMultipleMinor": true
+    },
+    // snapshot-controller
+    {
+      "groupName": "snapshot-controller",
+      "matchFileNames": ["kubernetes/**"],
+      "matchDatasources": "github-tags",
+      "matchDepNames": [
+        "snapshot-controller",
+        "external-snapshotter-crd"
+      ],
+      // to the latest
+      "separateMajorMinor": false,
+      "separateMultipleMajor": false
+    },
+    // rook-ceph
+    {
+      "groupName": "rook-ceph",
+      "matchFileNames": ["kubernetes/**"],
+      "matchDatasources": "helm",
+      "matchDepNames": ["rook-ceph"],
+      "separateMultipleMinor": true
+    },
+    {
+      "groupName": "ceph",
+      "matchFileNames": ["kubernetes/**"],
+      "matchDatasources": "docker",
+      "matchDepNames": ["quay.io/ceph/ceph"]
+    },
+    // intel-device-plugins
+    {
+      "groupName": "intel-device-plugins",
+      "matchFileNames": ["kubernetes/**"],
+      "matchDatasources": "helm",
+      "matchDepNames": [
+        "intel-device-plugins-gpu",
+        "intel-device-plugins-operator"
+      ]
+    },
+    // apps
+    {
+      "groupName": "immich",
+      "matchFileNames": ["kubernetes/**"],
+      "matchDatasources": "docker",
+      "matchDepNames": [
+        "ghcr.io/immich-app/immich-server",
+        "ghcr.io/immich-app/immich-machine-learning"
+      ]
+    }
+  ]
+}
diff --git a/renovate.json5 b/renovate.json5
@@ -1,70 +1,32 @@
 {
-  $schema: "https://docs.renovatebot.com/renovate-schema.json",
-  // configurations
-  // https://docs.renovatebot.com/configuration-options
-  extends: ["config:recommended", ":disableRateLimiting"],
-  timezone: "Asia/Taipei",
-  dependencyDashboard: true,
-  kubernetes: {
-    fileMatch: ["^kubernetes/.*\\.yaml$"],
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended", 
+    ":disableRateLimiting",
+    "github>timtorChen/homelab-action//.renovate/groups.json5",
+    "github>timtorChen/homelab-action//.renovate/customManagers.json5",
+    "github>timtorChen/homelab-action//.renovate/autoMerge.json5"
+  ],
+  "timezone": "Asia/Taipei",
+  "dependencyDashboard": true,
+  "kubernetes": {
+    "fileMatch": ["^kubernetes/.*\\.yaml$"]
   },
-  flux: {
-    fileMatch: ["^kubernetes/.*\\.yaml$"],
+  "flux": {
+    "fileMatch": ["^kubernetes/.*\\.yaml$"]
   },
   "helm-values": {
-    fileMatch: ["^(kubernetes|talos)/.*\\.yaml$"],
+    "fileMatch": ["^(kubernetes|talos)/.*\\.yaml$"]
   },
-  ignorePaths: ["**/archive/**"],
-  packageRules: [
-    // Groups
-    {
-      matchDepPatterns: [
-        "ghcr.io/immich-app/immich-server",
-        "ghcr.io/immich-app/immich-machine-learning",
-      ],
-      groupName: "immich",
-    },
-    {
-      matchDepPatterns: [
-        "ghcr.io/siderolabs/kubelet",
-        "registry.k8s.io/kube-apiserver",
-        "registry.k8s.io/kube-controller-manager",
-        "registry.k8s.io/kube-scheduler",
-        "gcr.io/etcd-development/etcd",
-        "docker.io/coredns/coredns",
-      ],
-      groupName: "kubernetes",
-    },
-    {
-      matchDepPatterns: ["ghcr.io/siderolabs/installer"],
-      commitMessageTopic: "talos",
-      groupName: "talos",
-    },
+  "ignorePaths": ["**/archive/**"],
+  "customManagers": [
     {
-      matchPackagePatterns: ["hashicorp/terraform", "hashicorp/aws"],
-      groupName: "terraform",
-    },
-    // Auto merge
-    {
-      matchDepPatterns: [
-        "deluan/navidrome",
-        "ghcr.io/dani-garcia/vaultwarden",
-        "ghcr.io/immich-app/immich-server",
-        "ghcr.io/immich-app/immich-machine-learning",
-        "cloudflare/cloudflared",
-        "matusnovak/prometheus-smartctl",
-        "jacobalberty/unifi",
-        "ghcr.io/unpoller/unpoller",
-      ],
-      matchUpdateTypes: ["patch"],
-      automergeType: "branch",
-      automerge: true,
-    },
-    {
-      matchDepPatterns: ["grafana"],
-      matchUpdateTypes: ["minor", "patch"],
-      automergeType: "branch",
-      automerge: true,
-    },
-  ],
+      "customType": "regex",
+      "fileMatch": ["^talos/.*\\.yaml$"],
+      "datasourceTemplate": "docker",
+      "matchStrings": [
+        "# renovate: depName=(?<depName>.*?)\n *image: factory\\.talos\\.dev\/installer\/[a-z0-9]+:(?<currentValue>v[\\d\\.]+)"
+      ]
+    }
+  ]
 }
diff --git a/talos/nuc11tnhi50l-1.yaml b/talos/nuc11tnhi50l-1.yaml
@@ -13,6 +13,7 @@ machine:
       - SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="48:21:0b:2c:f4:8c", NAME="eth1"
   install:
     disk: /dev/sda
+    # renovate: depName=ghcr.io/siderolabs/installer
     image: factory.talos.dev/installer/ed036d0640097a4e7af413ee089851a12963cd2e2e1715f8866d551d17c2ec62:v1.9.0
   kubelet:
     image: ghcr.io/siderolabs/kubelet:v1.32.0
diff --git a/talos/nuc11tnhi50l-2.yaml b/talos/nuc11tnhi50l-2.yaml
@@ -13,6 +13,7 @@ machine:
       - SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="48:21:0b:2c:f3:9b", NAME="eth1"
   install:
     disk: /dev/sda
+    # renovate: depName=ghcr.io/siderolabs/installer
     image: factory.talos.dev/installer/ed036d0640097a4e7af413ee089851a12963cd2e2e1715f8866d551d17c2ec62:v1.9.0
   kubelet:
     image: ghcr.io/siderolabs/kubelet:v1.32.0
diff --git a/talos/nuc11tnhi50l-3.yaml b/talos/nuc11tnhi50l-3.yaml
@@ -13,6 +13,7 @@ machine:
       - SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="54:b2:03:fd:73:0a", NAME="eth1"
   install:
     disk: /dev/sda
+    # renovate: depName=ghcr.io/siderolabs/installer
     image: factory.talos.dev/installer/ed036d0640097a4e7af413ee089851a12963cd2e2e1715f8866d551d17c2ec62:v1.9.0
   kubelet:
     image: ghcr.io/siderolabs/kubelet:v1.32.0
diff --git a/talos/pi4b-1.yaml b/talos/pi4b-1.yaml
@@ -6,6 +6,10 @@ machine:
   type: controlplane
   network:
     hostname: amethyst-pi4b-1
+  install:
+    disk: /dev/sda
+    # renovate: depName=ghcr.io/siderolabs/installer
+    image: factory.talos.dev/installer/ee21ef4a5ef808a9b7484cc0dda0f25075021691c8c09a276591eedb638ea1f9:v1.9.0
   kubelet:
     image: ghcr.io/siderolabs/kubelet:v1.32.0
 cluster:

diff --git a/talos/roles/controlplane.yaml b/talos/roles/controlplane.yaml
@@ -12,8 +12,8 @@ machine:
     key: ${machine_ca_key}
   certSANs: []
   install:
-    image: factory.talos.dev/installer/ee21ef4a5ef808a9b7484cc0dda0f25075021691c8c09a276591eedb638ea1f9:v1.9.0
-    disk: /dev/sda
+    image: ""
+    disk: ""
     wipe: false
     extraKernelArgs:
       - talos.logging.kernel=tcp://192.168.253.100:3001