feat(renovate-operator): Fix ratelimits

k8s-peterg/renovate-operator/configmap.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-config
+  namespace: renovate-operator
+data:
+  config.json: |-
+    {
+      "hostRules": [
+        {
+          "matchHost": "docker.io",
+          "username": "{{ env.DOCKER_USERNAME}}",
+          "password": "{{ env.DOCKER_TOKEN }}"
+        },
+        {
+          "matchHost": "registry-1.docker.io",
+          "username": "{{ env.DOCKER_USERNAME}}",
+          "password": "{{ env.DOCKER_TOKEN }}"
+        }
+      ]
+    }

k8s-peterg/renovate-operator/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 namespace: renovate-operator
 
 resources:
+  - configmap.yaml
   - namespace.yaml
   # - policies.yaml
   - renovate-job.yaml

k8s-peterg/renovate-operator/renovate-job.yaml

@@ -13,6 +13,13 @@ spec:
   secretRef: renovate-operator-secrets
   parallelism: 1
   skipForks: true
+  extraVolumes:
+    - name: renovate-config
+      configMap:
+        name: renovate-config
+  extraVolumeMounts:
+    - name: renovate-config
+      mountPath: /opt/renovate
   extraEnv:
     - name: LOG_LEVEL
       value: debug
@@ -22,3 +29,5 @@ spec:
       value: "true"
     - name: RENOVATE_GIT_AUTHOR
       value: "Renovate <renovate@peterg.nl>"
+    - name: RENOVATE_CONFIG_FILE
+      value: /opt/renovate/config.json

k8s-peterg/renovate-operator/secrets.yaml

@@ -20,3 +20,25 @@ spec:
       remoteRef:
         key: /secrets/managed/renovate/token
         property: GITHUB_COM_TOKEN
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: renovate-operator-docker-login
+  namespace: renovate-operator
+spec:
+  refreshInterval: "15s"
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: renovate-operator-docker-login
+  data:
+    - secretKey: DOCKER_USERNAME
+      remoteRef:
+        key: /secrets/managed/renovate/docker
+        property: DOCKER_USERNAME
+    - secretKey: DOCKER_TOKEN
+      remoteRef:
+        key: /secrets/managed/renovate/docker
+        property: DOCKER_PASSWORD

k8s-peterg/renovate-operator/values.yaml

@@ -4,6 +4,10 @@ metrics:
   serviceMonitor:
     enabled: false
 
+image:
+  imagePullSecrets:
+    - name: renovate-operator-docker-login
+
 route:
   enabled: true
   hostnames: