Add renovate workflow to bump fluent-bit version (#1535)

* Introduce renovate bot for bumping fluent-bit version

Signed-off-by: Truong Nguyen <[email protected]>

* renovate wf: Use default Renovate version from github-action

Signed-off-by: Truong Nguyen <[email protected]>

* renovate wf: Update repository to point to upstream fluent-operator

Signed-off-by: Truong Nguyen <[email protected]>

* Apply suggestions from code review

Co-authored-by: Marco Franssen <[email protected]>
Signed-off-by: truongnht <[email protected]>

---------

Signed-off-by: Truong Nguyen <[email protected]>
Signed-off-by: truongnht <[email protected]>
Co-authored-by: Marco Franssen <[email protected]>

Author: truongnht

.github/renovate-config.js

@@ -0,0 +1,40 @@
+const helmRegex = {
+  customType: "regex",
+  datasourceTemplate: "helm",
+  matchStringsStrategy: "combination",
+};
+
+const customRegex = {
+  customType: "regex",
+  matchStringsStrategy: "combination",
+};
+
+module.exports = {
+  username: "renovate[bot]",
+  gitAuthor: "Renovate Bot <[email protected]>",
+  onboarding: false,
+  platform: "github",
+  dryRun: null,
+  repositories: ["fluent/fluent-operator"],
+  enabledManagers: ["custom.regex"],
+  extends: ["config:recommended"],
+  customManagers: [
+    {
+      customType: "regex",
+      matchStringsStrategy: "any",
+      fileMatch: [
+        "charts/fluent-operator/values.yaml",
+        "config/.*\\.yaml",
+        "docs/.*\\.yaml",
+        "manifests/.*\\.yaml",
+        "cmd/fluent-watcher/fluentbit/VERSION",
+      ],
+      matchStrings: [
+        '# renovate:\\s+datasource=(?<datasource>\\S+?)\\s+depName=(?<depName>\\S+?)\\s+tag:\\s+"(?<currentValue>.+?)"\\s+?',
+        "# renovate:\\s+datasource=(?<datasource>\\S+?)\\s+depName=(?<depName>.+?)\\s+image:\\s*(?:.?)*:(?<currentValue>.*?)\\s+?",
+        "# renovate:\\s+datasource=(?<datasource>\\S+?)\\s+depName=(?<depName>.+?)\\s+version=\\n(?<currentValue>.+?)\\n",
+      ],
+      extractVersionTemplate: "^v(?<version>.*)$",
+    },
+  ],
+};

.github/renovate.json5

@@ -0,0 +1,5 @@
+{
+  $schema: "https://docs.renovatebot.com/renovate-schema.json",
+  labels: ["dependencies"],
+  extends: ["config:best-practices", ":disableDependencyDashboard"],
+}

.github/workflows/renovate.yaml

@@ -0,0 +1,35 @@
+name: Renovate
+on:
+  push:
+    paths:
+      - ".github/workflows/renovate.yaml"
+      - ".github/renovate-config.js"
+  schedule:
+    - cron: "0 7 * * 5"
+  workflow_dispatch:
+
+env:
+  ACTIONS_STEP_DEBUG: ${{ secrets.ACTIONS_STEP_DEBUG }}
+
+jobs:
+  renovate:
+    runs-on: [self-hosted, linux, x64]
+
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@e084b5ac6fd201023db6dd7743aec023babb02c8 # v41.0.13
+        with:
+          configurationFile: ".github/renovate-config.js"
+          token: "${{ secrets.GITHUB_TOKEN }}"
+        env:
+          LOG_LEVEL: ${{ env.ACTIONS_STEP_DEBUG == 'true' && 'debug' || 'info' }}
+          RENOVATE_REPOSITORIES: ${{ github.repository }}
+          RENOVATE_ALLOW_SCRIPTS: true
+          RENOVATE_SEPARATE_MAJOR_MINOR: false

Makefile

@@ -7,7 +7,7 @@ SHELL = /usr/bin/env bash -o pipefail
 .SHELLFLAGS = -ec
 
 VERSION ?= $(shell cat VERSION | tr -d " \t\n\r")
-FB_VERSION ?= $(shell cat cmd/fluent-watcher/fluentbit/VERSION | tr -d " \t\n\r")
+FB_VERSION?=$(shell grep -v '^#' cmd/fluent-watcher/fluentbit/VERSION | tr -d " \t\n\r")
 # Image URL to use all building/pushing image targets
 FB_IMG ?= ghcr.io/fluent/fluent-operator/fluent-bit:v${FB_VERSION}
 FB_IMG_DEBUG ?= ghcr.io/fluent/fluent-operator/fluent-bit:v${FB_VERSION}-debug

charts/fluent-operator/values.yaml

@@ -97,7 +97,8 @@ fluentbit:
 
   image:
     repository: "ghcr.io/fluent/fluent-operator/fluent-bit"
-    tag: "4.0.0"
+    tag: 4.0.0
+    # renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
   # fluentbit resources. If you do want to specify resources, adjust them as necessary
   # You can adjust it based on the log volume.
   resources:

cmd/fluent-watcher/fluentbit/VERSION

@@ -1 +1,2 @@
+# renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit version=
 4.0.0

config/samples/fluentbit_v1alpha2_fluentbit.yaml

@@ -5,6 +5,7 @@ metadata:
   labels:
     app: fluent-bit
 spec:
+  # renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
   image: ghcr.io/fluent/fluent-operator/fluent-bit:4.0.0
   imagePullPolicy: IfNotPresent
   positionDB:

docs/best-practice/forwarding-logs-via-http/deploy/fluentbit-fluentBit.yaml

@@ -5,6 +5,7 @@ metadata:
   labels:
     app.kubernetes.io/name: fluent-bit
 spec:
+  # renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
   image: ghcr.io/fluent/fluent-operator/fluent-bit:4.0.0
   positionDB:
     hostPath:

manifests/kubeedge/fluentbit-fluentbit-edge.yaml

@@ -6,6 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: fluent-bit
 spec:
+  # renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
   image: ghcr.io/fluent/fluent-operator/fluent-bit:4.0.0
   positionDB:
     hostPath:

manifests/logging-stack/fluentbit-fluentBit.yaml

@@ -6,6 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: fluent-bit
 spec:
+  # renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
   image: ghcr.io/fluent/fluent-operator/fluent-bit:4.0.0
   positionDB:
     hostPath: