apiVersion: batch/v1
kind: CronJob
metadata:
  name: renovate
  namespace: renovate
spec:
  schedule: "0 */6 * * *"
  concurrencyPolicy: Forbid
  successfulJobsHistoryLimit: 3
  failedJobsHistoryLimit: 3
  jobTemplate:
    spec:
      backoffLimit: 0
      template:
        spec:
          restartPolicy: Never
          containers:
          - name: renovate
            image: ghcr.io/renovatebot/renovate:latest
            imagePullPolicy: Always
            env:
            - name: RENOVATE_TOKEN
              valueFrom:
                secretKeyRef:
                  name: renovate-token
                  key: RENOVATE_TOKEN
            - name: RENOVATE_CONFIG_FILE
              value: /opt/renovate/config.js
            - name: LOG_LEVEL
              value: info
            resources:
              requests:
                cpu: 100m
                memory: 256Mi
              limits:
                cpu: "1"
                memory: 1Gi
            volumeMounts:
            - name: config
              mountPath: /opt/renovate
              readOnly: true
          volumes:
          - name: config
            configMap:
              name: renovate-config