Merge branch 'renovate/ironbank' into 'main'

Update Ironbank

Closes #14

See merge request !20

CHANGELOG.md

@@ -4,6 +4,14 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ---
 
+## [37.104.1-bb.0] - 2023-12-19
+### Updated
+- ghcr.io/renovatebot/renovate - minor - 37.27.0 -> 37.104.1
+- gluon - patch - 0.4.4 -> 0.4.5
+- redis - minor - 18.0.4-bb.0 -> 18.3.2-bb.1
+- registry1.dso.mil/ironbank/bitnami/redis - patch - 7.2.2 -> 7.2.3
+- registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate - minor - 37.27.0 -> 37.91.5
+
 ## [37.27.0-bb.1] - 2023-11-27
 ### Added
 - Added istio `allow-nothing` policy

README.md

 # renovate
 
-![Version: 37.27.0-bb.1](https://img.shields.io/badge/Version-37.27.0--bb.1-informational?style=flat-square) ![AppVersion: 37.27.0](https://img.shields.io/badge/AppVersion-37.27.0-informational?style=flat-square)
+![Version: 37.104.1-bb.0](https://img.shields.io/badge/Version-37.104.1--bb.0-informational?style=flat-square) ![AppVersion: 37.104.1](https://img.shields.io/badge/AppVersion-37.104.1-informational?style=flat-square)
 
 Universal dependency update tool that fits into your workflows.
 
@@ -59,7 +59,7 @@ helm install renovate chart/
 | pod.labels | object | `{}` | Labels to set on the pod |
 | image.registry | string | `"registry1.dso.mil"` | Repository to pull renovate image from |
 | image.repository | string | `"ironbank/container-hardening-tools/renovate/renovate"` |  |
-| image.tag | string | `"37.27.0"` | Renovate image tag to pull |
+| image.tag | string | `"37.104.1"` | Renovate image tag to pull |
 | image.pullPolicy | string | `"IfNotPresent"` | "IfNotPresent" to pull the image if no image with the specified tag exists on the node, "Always" to always pull the image or "Never" to try and use pre-pulled images |
 | imagePullSecrets | list | `[{"name":"private-registry"}]` | Secret to use to pull the image from the repository |
 | renovate.existingConfigFile | string | `""` | Custom exiting global renovate config |

chart/Chart.lock

 dependencies:
 - name: redis
   repository: oci://registry1.dso.mil/bigbang
-  version: 18.0.4-bb.0
+  version: 18.3.2-bb.1
 - name: gluon
   repository: oci://registry1.dso.mil/bigbang
-  version: 0.4.4
-digest: sha256:b9fb502e56e3a8a8c299c00e650079bcd571c40e1d589922f7ab148de10840f9
-generated: "2023-11-09T11:02:15.559669-06:00"
+  version: 0.4.5
+digest: sha256:7d5e9990d853eec769dd684072a92609b3c2af894ef5dd3a4e47f7f7d6a28c6a
+generated: "2023-12-19T10:37:01.292370855-07:00"

chart/Chart.yaml

 apiVersion: v2
-appVersion: '37.27.0'
+appVersion: '37.104.1'
 description: Universal dependency update tool that fits into your workflows.
 name: renovate
-version: '37.27.0-bb.1'
+version: '37.104.1-bb.0'
 icon: https://docs.renovatebot.com/assets/images/logo.png
 home: https://github.com/renovatebot/renovate
 keywords:
@@ -23,12 +23,12 @@ maintainers:
     email: rhys@arkins.net
 annotations:
   bigbang.dev/applicationVersions: |
-    - Renovate: 37.27.0
+    - Renovate: 37.91.5
   helm.sh/images: |
     - name: renovate
-      image: registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate:37.27.0
+      image: registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate:37.91.5
     - name: redis
-      image: registry1.dso.mil/ironbank/bitnami/redis:7.2.2
+      image: registry1.dso.mil/ironbank/bitnami/redis:7.2.3
       condition: redis.enabled
     - name: exporter
       image: registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter:v1.55.0
@@ -36,17 +36,18 @@ annotations:
   artifacthub.io/license: AGPL-3.0-only
   artifacthub.io/images: |
     - name: renovate
-      image: ghcr.io/renovatebot/renovate:37.27.0
+      image: ghcr.io/renovatebot/renovate:37.104.1
       platforms:
         - linux/amd64
+        - linux/arm64
   artifacthub.io/links: |
     - name: docs
       url: https://docs.renovatebot.com
 dependencies:
   - name: redis
     repository:  "oci://registry1.dso.mil/bigbang"
-    version: 18.0.4-bb.0
+    version: 18.3.2-bb.1
     condition: redis.enabled
   - name: gluon
-    version: "0.4.4"
+    version: "0.4.5"
     repository: "oci://registry1.dso.mil/bigbang"

chart/Kptfile

@@ -5,7 +5,7 @@ metadata:
 upstream:
   type: git
   git:
-    commit: 95b66745005d3c7bc3422dc84ab13a23aeb9d54d
+    commit: 5d0c81d573e8ac3741fee5123581c38843e89a79
     repo: https://github.com/renovatebot/helm-charts
     directory: charts/renovate
-    ref: renovate-37.27.0
+    ref: renovate-37.104.1

chart/README.md

 # renovate
 
-![Version: 37.27.0](https://img.shields.io/badge/Version-37.27.0-informational?style=flat-square) ![AppVersion: 37.27.0](https://img.shields.io/badge/AppVersion-37.27.0-informational?style=flat-square)
+![Version: 37.104.1](https://img.shields.io/badge/Version-37.104.1-informational?style=flat-square) ![AppVersion: 37.104.1](https://img.shields.io/badge/AppVersion-37.104.1-informational?style=flat-square)
 
 Universal dependency update tool that fits into your workflows.
 
@@ -71,7 +71,7 @@ The following table lists the configurable parameters of the chart and the defau
 | image.pullPolicy | string | `"IfNotPresent"` | "IfNotPresent" to pull the image if no image with the specified tag exists on the node, "Always" to always pull the image or "Never" to try and use pre-pulled images |
 | image.registry | string | `"ghcr.io"` | Registry to pull image from |
 | image.repository | string | `"renovatebot/renovate"` | Image name to pull |
-| image.tag | string | `"37.27.0"` | Renovate image tag to pull |
+| image.tag | string | `"37.104.1"` | Renovate image tag to pull |
 | imagePullSecrets | object | `{}` | Secret to use to pull the image from the repository |
 | nameOverride | string | `""` | Override the name of the chart |
 | nodeSelector | object | `{}` | Select the node using labels to specify where the cronjob pod should run on |

chart/templates/cronjob.yaml

@@ -101,7 +101,7 @@ spec:
                   {{- .Values.cronjob.postCommand | nindent 18 }}
                 {{- end }}
               {{- end }}
-              {{- if or .Values.renovate.config .Values.ssh_config.enabled .Values.extraVolumes }}
+              {{- if or .Values.renovate.config .Values.ssh_config.enabled .Values.renovate.persistence.cache.enabled .Values.extraVolumeMounts }}
               volumeMounts:
               {{- if .Values.renovate.config }}
               - name: config-volume
@@ -116,11 +116,11 @@ spec:
               {{- if .Values.extraVolumeMounts }}
                 {{- toYaml .Values.extraVolumeMounts | nindent 14 }}
               {{- end }}
-              {{- end }}
               {{- if .Values.renovate.persistence.cache.enabled }}
               - name: {{ include "renovate.fullname" . }}-cache
                 mountPath: /tmp/renovate
               {{- end }}
+              {{- end }}
               env:
                 {{- if .Values.renovate.existingConfigFile }}
                 - name: RENOVATE_CONFIG_FILE

chart/values.yaml

@@ -63,7 +63,7 @@ image:
   registry: registry1.dso.mil
   repository: ironbank/container-hardening-tools/renovate/renovate
   # -- Renovate image tag to pull
-  tag: 37.27.0
+  tag: 37.104.1
   # -- "IfNotPresent" to pull the image if no image with the specified tag exists on the node, "Always" to always pull the image or "Never" to try and use pre-pulled images
   pullPolicy: IfNotPresent
 
@@ -206,6 +206,8 @@ envFrom: []
 
 # -- Environment variables to set on the renovate container
 env: {}
+# env:
+#   VARIABLE_NAME: "value"
 
 # -- Additional env. Helpful too if you want to use anything other than a `value` source.
 envList: []