add renovatebot self hosted app and update helm chart docker tag to `…

…v0.6.0` (#37)

* add renovatebot self hosted app and update helm chart docker tag to v0.6.0

* add automated helm docs updates

.github/renovate-config.json

@@ -0,0 +1,11 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "onboarding": false,
+    "username": "renovate-release",
+    "gitAuthor": "Renovate Bot <bot@renovateapp.com>",
+    "platform": "github",
+    "repositories": [
+        "small-hack/appset-secret-plugin"
+    ],
+    "allowedPostUpgradeCommands": ["^scripts"]
+}

.github/workflows/helm-docs.yaml

@@ -0,0 +1,26 @@
+name: Generate helm docs
+
+on:
+  pull_request:
+    paths:
+      - 'charts/matrix/**'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-docs:
+    name: update-docs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+
+      - name: Render helm docs inside the README.md and push changes back to PR branch
+        uses: netfoundry/helm-docs-action@v1
+        with:
+          working-dir: charts/matrix
+          git-push: "true"

.github/workflows/renovate.yml

@@ -0,0 +1,33 @@
+name: Renovate
+on:
+  workflow_dispatch:
+  schedule:
+    # This should be every hour
+    - cron: '0 * * * *'
+  push:
+    branches:
+      - main
+    paths:
+      - ".github/renovate-config.json"
+      - ".github/workflows/renovate.yml"
+      - "renovate.json"
+      - "scripts/**"
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          private-key: ${{ secrets.PRIVATE_KEY }}
+          app-id: ${{ secrets.APP_ID }}
+
+      - name: Checkout
+        uses: actions/checkout@v4.1.7
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v40.1.12
+        with:
+          token: '${{ steps.app-token.outputs.token }}'
+          configurationFile: .github/renovate-config.json

charts/appset-secret-plugin/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
 # pipeline. Library charts do not define any templates and therefore cannot be deployed.
 type: application
 
-version: 0.7.0
+version: 0.8.0
 
 # renovate: image=jessebot/argocd-appset-secret-plugin
-appVersion: "v0.5.0"
+appVersion: "v0.6.0"

charts/appset-secret-plugin/README.md

@@ -1,6 +1,6 @@
 # appset-secret-plugin
 
-![Version: 0.7.0](https://img.shields.io/badge/Version-0.7.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.5.0](https://img.shields.io/badge/AppVersion-v0.5.0-informational?style=flat-square)
+![Version: 0.8.0](https://img.shields.io/badge/Version-0.8.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.6.0](https://img.shields.io/badge/AppVersion-v0.6.0-informational?style=flat-square)
 
 A Helm chart for adding a K8s Secret Plugin Generator to Argo CD ApplicationSets
 

renovate.json

@@ -1,15 +1,54 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:base"
-  ],
-  "regexManagers": [
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+          "config:recommended", ":disableDependencyDashboard"
+    ],
+    "customManagers": [
         {
-            "fileMatch": ["(^|/)Chart\\.yaml$"],
-            "matchStrings": [
-                "#\\s?renovate: image=(?<depName>.*?)\\s?appVersion:\\s?\\\"?(?<currentValue>[\\w+\\.\\-]*)",
-            ],
-            "datasourceTemplate": "docker"
-        },
+          "customType": "regex",
+          "datasourceTemplate": "docker",
+          "fileMatch": [
+            "(^|/)Chart\\.yaml$"
+          ],
+          "matchStrings": [
+            "#\\s*renovate: image=(?<depName>.*?)\\s+appVersion:\\s*[\"']?(?<currentValue>[\\w+\\.\\-]*)"
+          ]
+        }
+    ],
+    "packageRules": [
+      {
+        "description": "Fix subchart archives for helm chart",
+        "matchManagers": ["helmv3"],
+        "postUpdateOptions": ["helmUpdateSubChartArchives"]
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep patch updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["patch"],
+        "bumpVersion": "patch"
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep minor updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["minor"],
+        "bumpVersion": "minor"
+      },
+      {
+        "description": "Fix version in Chart.yaml after helmv3 dep major updates",
+        "matchManagers": ["helmv3"],
+        "matchUpdateTypes": ["major"],
+        "bumpVersion": "major"
+      },
+      {
+        "description": "Bump helm chart versions by a patch when updating values files. This can be removed when https://github.com/renovatebot/renovate/issues/8231 is implemented and enabled.",
+        "matchManagers": ["helm-values", "regex"],
+        "postUpgradeTasks": {
+          "commands": [
+            "scripts/bump-chart-version.sh '{{{updateType}}}'"
+          ],
+          "fileFilters": ["**/Chart.yaml"],
+          "executionMode": "branch"
+        }
+      }
     ]
 }

scripts/bump-chart-version.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# thanks to original comment: https://github.com/renovatebot/renovate/issues/8231#issuecomment-1978929997
+# converted to discussion: https://github.com/renovatebot/renovate/discussions/28861#discussioncomment-9326722
+
+set -euo pipefail
+
+update_type="$1"
+version=$(grep "^version:" "./charts/appset-secret-plugin/Chart.yaml" | awk '{print $2}')
+
+if [[ ! $version ]]; then
+  echo "No valid version was found"
+  exit 1
+fi
+
+major=$(echo "$version" | cut -d. -f1)
+minor=$(echo "$version" | cut -d. -f2)
+patch=$(echo "$version" | cut -d. -f3)
+
+if [[ "$update_type" =~ (major|replacement) ]]; then
+  major=$(( major + 1 ))
+  minor=0
+  patch=0
+elif [[ "$update_type" =~ 'minor' ]]; then
+  minor=$(( minor + 1 ))
+  patch=0
+else
+  patch=$(( patch + 1 ))
+fi
+
+echo "Bumping version for appset-secret-plugin chart from $version to $major.$minor.$patch"
+sed -i "s/^version:.*/version: ${major}.${minor}.${patch}/g" "charts/appset-secret-plugin/Chart.yaml"