feat(renovate): add renovate chart (#28117)

**Description**
Adds a renovate cron helm-chart.
This bypasses some issues where renovate GitHub Action is fiercely
depending on docker being available to run dind code.

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

charts/incubator/renovate/.helmignore

@@ -0,0 +1,32 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png
+icon.webp
+icon-small.webp

charts/incubator/renovate/Chart.yaml

@@ -0,0 +1,29 @@
+annotations:
+ truecharts.org/category: security
+ truecharts.org/train: incubator
+apiVersion: v2
+appVersion: 1.32.1
+dependencies:
+ - name: common
+ version: 25.1.0
+ repository: oci://tccr.io/truecharts
+ condition: ""
+ alias: ""
+ tags: []
+ import-values: []
+deprecated: false
+description: renovate self-hosted
+home: https://truecharts.org/charts/premium/renovate
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/renovate.webp
+keywords:
+ - renovate
+kubeVersion: '>=1.24.0-0'
+maintainers:
+ - name: TrueCharts
+ email: [email protected]
+ url: https://truecharts.org
+name: renovate
+sources:
+ - https://github.com/truecharts/charts/tree/master/charts/premium/renovate
+type: application
+version: 0.0.1

charts/incubator/renovate/README.md

@@ -0,0 +1,61 @@
+---
+title: README
+---
+
+## General Info
+
+TrueCharts can be installed as both _normal_ Helm Charts or as TrueNAS SCALE Apps.
+Both solutions are fully supported, but we heavily advice the use of normal Helm Charts where possible
+
+For more information about this Chart, please check the docs on the TrueCharts [website](https://truecharts.org/charts/premium/renovate)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+## Installation
+
+### Helm-Chart installation
+
+To install TrueCharts Helm charts using Helm, you can use our OCI Repository.
+
+`helm install mychart oci://tccr.io/truecharts/renovate`
+
+For more information on how to install TrueCharts Helm charts, checkout the [instructions on the website](/guides)
+
+
+### TrueNAS SCALE Apps
+
+For more information on how to use TrueCharts as TrueNAS SCALE Apps, please checkout the [quick-start guides for TrueNAS SCALE](/deprecated/scale).
+
+## Chart Specific Guides and information
+
+All our charts have dedicated documentation pages.
+The documentation for this chart can be found here:
+https://truecharts.org/charts/premium/renovate
+
+## Configuration Options
+
+Please note: For TrueNAS SCALE, only options available in the GUI are supported.
+Hence most of these docs do not apply to TrueNAS SCALE
+
+To view the chart specific options, please view Values.yaml included in the chart.
+The most recent version of which, is available here: https://github.com/truecharts/public/blob/master/charts/premium/renovate/values.yaml
+
+All our Charts use a shared "common" library chart that contains most of the templating and options.
+For the complete overview of all available options, please checkout the documentation for them on the [common docs on our website](/common)
+
+For information about the common chart and all defaults included with it, please review its values.yaml file available here: https://github.com/truecharts/public/blob/master/charts/library/common/values.yaml
+
+## Support
+
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](/general/sponsor) or contributing back to the project any way you can!
+
+_All Rights Reserved - The TrueCharts Project_

charts/incubator/renovate/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/renovate/templates/common.yaml

@@ -0,0 +1,2 @@
+
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/renovate/values.yaml

@@ -0,0 +1,67 @@
+image:
+ repository: renovate/renovate
+ pullPolicy: IfNotPresent
+ tag: 38.128.6
+
+workload:
+ main:
+ enabled: true
+ primary: true
+ type: CronJob
+ schedule: "@hourly"
+ concurrencyPolicy: Allow
+ failedJobsHistoryLimit: 2
+ parallelism: 1
+ podSpec:
+ restartPolicy: OnFailure
+ containers:
+ main:
+ probes:
+ liveness:
+ enabled: false
+ readiness:
+ enabled: false
+ startup:
+ enabled: false
+ env:
+ GITHUB_COM_TOKEN: '${GITHUB_PAT}'
+ # You can set RENOVATE_AUTODISCOVER to true to run Renovate on all repos you have push access to
+ RENOVATE_AUTODISCOVER: 'false'
+ RENOVATE_GIT_AUTHOR: 'Renovate Bot <[email protected]>'
+ RENOVATE_PLATFORM: 'github'
+ RENOVATE_TOKEN: '${GITHUB_PAT}'
+ RENOVATE_CONFIG_FILE: /tmp/renovate/config.json
+ RENOVATE_BASE_DIR: ${GITHUB_WORKSPACE}
+ LOGLEVEL: debug
+
+configmap:
+ config:
+ enabled:
+ data:
+ config.json: |-
+ {
+ "repositories": ["truecharts/public"],
+ "dryRun" : "full"
+ }
+service:
+ main:
+ enabled: false
+ ports:
+ main:
+ enabled: false
+
+persistence:
+ configmap-vol:
+ enabled: true
+ type: configmap
+ objectName: config
+ defaultMode: "0777"
+ mountPath: /tmp/renovate/config.json
+ subPath: config.json
+ items:
+ - key: config.json
+ path: config.json
+
+portal:
+ open:
+ enabled: false