--- kubernetes/apps/renovate/renovate/operator Kustomization: renovate/renovate-operator OCIRepository: renovate/renovate-operator

+++ kubernetes/apps/renovate/renovate/operator Kustomization: renovate/renovate-operator OCIRepository: renovate/renovate-operator

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 2.8.3
+    tag: 2.9.2
   url: oci://ghcr.io/mogenius/helm-charts/renovate-operator
 

--- HelmRelease: renovate/renovate-operator Deployment: renovate/renovate-operator

+++ HelmRelease: renovate/renovate-operator Deployment: renovate/renovate-operator

@@ -21,13 +21,13 @@

         runAsNonRoot: true
         runAsUser: 1000
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: renovate-operator
-        image: ghcr.io/mogenius/renovate-operator:2.8.3
+        image: ghcr.io/mogenius/renovate-operator:2.9.2
         imagePullPolicy: IfNotPresent
         args:
         - --zap-log-level=info
         - --zap-encoder=json
         securityContext:
           allowPrivilegeEscalation: false
@@ -48,12 +48,14 @@

         - name: JOB_BACKOFF_LIMIT
           value: '1'
         - name: DELETE_SUCCESSFUL_JOBS
           value: 'false'
         - name: JOB_TTL_SECONDS_AFTER_FINISHED
           value: '-1'
+        - name: IMAGE_PULL_SECRETS
+          value: '[]'
         - name: SERVER_PORT
           value: '8081'
         - name: WEBHOOK_SERVER_PORT
           value: '8082'
         - name: WEBHOOK_SERVER_ENABLED
           value: 'true'
--- HelmRelease: renovate/renovate-operator ServiceAccount: renovate/renovate-operator-crd-hook

+++ HelmRelease: renovate/renovate-operator ServiceAccount: renovate/renovate-operator-crd-hook

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: renovate-operator-crd-hook
+  namespace: renovate
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: '-5'
+
--- HelmRelease: renovate/renovate-operator ConfigMap: renovate/renovate-operator-crd

+++ HelmRelease: renovate/renovate-operator ConfigMap: renovate/renovate-operator-crd

@@ -0,0 +1,3917 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: renovate-operator-crd
+  namespace: renovate
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: '-5'
+data:
+  renovatejob.yaml: |
+    ---
+    apiVersion: apiextensions.k8s.io/v1
+    kind: CustomResourceDefinition
+    metadata:
+      annotations:
+        controller-gen.kubebuilder.io/version: v0.20.1
+      name: renovatejobs.renovate-operator.mogenius.com
+    spec:
+      group: renovate-operator.mogenius.com
+      names:
+        kind: RenovateJob
+        listKind: RenovateJobList
+        plural: renovatejobs
+        singular: renovatejob
+      scope: Namespaced
+      versions:
+      - name: v1alpha1
+        schema:
+          openAPIV3Schema:
+            properties:
+              apiVersion:
+                description: |-
+                  APIVersion defines the versioned schema of this representation of an object.
+                  Servers should convert recognized schemas to the latest internal value, and
+                  may reject unrecognized values.
+                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+                type: string
+              kind:
+                description: |-
+                  Kind is a string value representing the REST resource this object represents.
+                  Servers may infer this from the endpoint the client submits requests to.
+                  Cannot be updated.
+                  In CamelCase.
+                  More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+                type: string
+              metadata:
+                type: object
+              spec:
+                description: RenovateJobSpec defines the desired state of RenovateJob
+                properties:
+                  affinity:
+                    description: Affinity settings for scheduling the resulting pod
+                    properties:
+                      nodeAffinity:
+                        description: Describes node affinity scheduling rules for the
+                          pod.
+                        properties:
+                          preferredDuringSchedulingIgnoredDuringExecution:
+                            description: |-
+                              The scheduler will prefer to schedule pods to nodes that satisfy
+                              the affinity expressions specified by this field, but it may choose
+                              a node that violates one or more of the expressions. The node that is
+                              most preferred is the one with the greatest sum of weights, i.e.
+                              for each node that meets all of the scheduling requirements (resource
+                              request, requiredDuringScheduling affinity expressions, etc.),
+                              compute a sum by iterating through the elements of this field and adding
+                              "weight" to the sum if the node matches the corresponding matchExpressions; the
+                              node(s) with the highest sum are the most preferred.
+                            items:
+                              description: |-
+                                An empty preferred scheduling term matches all objects with implicit weight 0
+                                (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op).
+                              properties:
+                                preference:
+                                  description: A node selector term, associated with the
+                                    corresponding weight.
+                                  properties:
+                                    matchExpressions:
+                                      description: A list of node selector requirements
+                                        by node's labels.
+                                      items:
+                                        description: |-
+                                          A node selector requirement is a selector that contains values, a key, and an operator
+                                          that relates the key and values.
+                                        properties:
+                                          key:
+                                            description: The label key that the selector
+                                              applies to.
+                                            type: string
+                                          operator:
+                                            description: |-
+                                              Represents a key's relationship to a set of values.
+                                              Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+                                            type: string
+                                          values:
+                                            description: |-
+                                              An array of string values. If the operator is In or NotIn,
+                                              the values array must be non-empty. If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. If the operator is Gt or Lt, the values
+                                              array must have a single element, which will be interpreted as an integer.
+                                              This array is replaced during a strategic merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                            x-kubernetes-list-type: atomic
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                      x-kubernetes-list-type: atomic
+                                    matchFields:
+                                      description: A list of node selector requirements
+                                        by node's fields.
+                                      items:
+                                        description: |-
+                                          A node selector requirement is a selector that contains values, a key, and an operator
+                                          that relates the key and values.
+                                        properties:
+                                          key:
+                                            description: The label key that the selector
+                                              applies to.
+                                            type: string
+                                          operator:
+                                            description: |-
+                                              Represents a key's relationship to a set of values.
+                                              Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt.
+                                            type: string
+                                          values:
+                                            description: |-
+                                              An array of string values. If the operator is In or NotIn,
+                                              the values array must be non-empty. If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. If the operator is Gt or Lt, the values
+                                              array must have a single element, which will be interpreted as an integer.
+                                              This array is replaced during a strategic merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                            x-kubernetes-list-type: atomic
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                      x-kubernetes-list-type: atomic
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                weight:
+                                  description: Weight associated with matching the corresponding
+                                    nodeSelectorTerm, in the range 1-100.
+                                  format: int32
+                                  type: integer
+                              required:
+                              - preference
+                              - weight
+                              type: object
+                            type: array
+                            x-kubernetes-list-type: atomic
+                          requiredDuringSchedulingIgnoredDuringExecution:
+                            description: |-
+                              If the affinity requirements specified by this field are not met at
+                              scheduling time, the pod will not be scheduled onto the node.
+                              If the affinity requirements specified by this field cease to be met
[Diff truncated by flux-local]
--- HelmRelease: renovate/renovate-operator ClusterRole: renovate/renovate-operator-crd-hook

+++ HelmRelease: renovate/renovate-operator ClusterRole: renovate/renovate-operator-crd-hook

@@ -0,0 +1,20 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: renovate-operator-crd-hook
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: '-5'
+rules:
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - get
+  - create
+  - update
+  - patch
+
--- HelmRelease: renovate/renovate-operator ClusterRoleBinding: renovate/renovate-operator-crd-hook

+++ HelmRelease: renovate/renovate-operator ClusterRoleBinding: renovate/renovate-operator-crd-hook

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: renovate-operator-crd-hook
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: '-5'
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: renovate-operator-crd-hook
+subjects:
+- kind: ServiceAccount
+  name: renovate-operator-crd-hook
+  namespace: renovate
+
--- HelmRelease: renovate/renovate-operator Job: renovate/renovate-operator-crd-install

+++ HelmRelease: renovate/renovate-operator Job: renovate/renovate-operator-crd-install

@@ -0,0 +1,33 @@

+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: renovate-operator-crd-install
+  namespace: renovate
+  annotations:
+    helm.sh/hook: pre-install,pre-upgrade
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
+    helm.sh/hook-weight: '0'
+spec:
+  backoffLimit: 3
+  template:
+    spec:
+      serviceAccountName: renovate-operator-crd-hook
+      restartPolicy: OnFailure
+      containers:
+      - name: kubectl
+        image: registry.k8s.io/kubectl:v1.35.0
+        imagePullPolicy: IfNotPresent
+        command:
+        - kubectl
+        - apply
+        - -f
+        - /crd/renovatejob.yaml
+        volumeMounts:
+        - name: crd
+          mountPath: /crd
+      volumes:
+      - name: crd
+        configMap:
+          name: renovate-operator-crd
+