Renovate as cronjob

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

apps-kustomized/renovate/cronjob.yaml

@@ -0,0 +1,36 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate
+spec:
+  schedule: '@daily'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: renovate
+              # Update this to the latest available and then enable Renovate on
+              # the manifest
+              image: renovate/renovate:38.101.1
+              args:
+                - user/repo
+              # Environment Variables
+              env:
+                - name: LOG_LEVEL
+                  value: info
+                - name: RENOVATE_AUTODISCOVER
+                  value: 'true'
+                - name: RENOVATE_ENDPOINT
+                  value: https://git.martyn.berlin
+                - name: RENOVATE_PLATFORM
+                  value: gitea #actually forgejo but renovate calls it gitea
+                - name: RENOVATE_GIT_AUTHOR
+                  value: 'Renovate bot <git@martyn.berlin>'
+                - name: RENOVATE_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: renovate-env
+                      key: RENOVATE_TOKEN
+          restartPolicy: Never

everything-app/renovate.yaml

@@ -0,0 +1,17 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: renovate
+  namespace: argocd
+spec:
+  destination:
+    namespace: git
+    server: https://kubernetes.default.svc
+  project: apps
+  source:
+    path: apps-kustomized/renovate
+    repoURL: https://git.martyn.berlin/martyn/infra4talos
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      selfHeal: true