ci: add renovate action (#61)

This pull request introduces extensive updates to the repository,
primarily focusing on enabling and configuring Renovate for dependency
management and simplifying image repository structures across the
infrastructure files. Key changes include adding Renovate configuration
and workflow files, updating image repository paths, and streamlining
Helm template logic.

Author: a-klos

.github/renovate.json

@@ -0,0 +1,137 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "timezone": "UTC",
+  "schedule": ["before 4am"],
+  "labels": ["renovate"],
+  "semanticCommits": "enabled",
+  "semanticCommitType": "chore",
+  "semanticCommitScope": "deps",
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 50,
+  "stabilityDays": 7,
+  "repositories": ["stackitcloud/rag-template"],
+  "hostRules": [
+    {
+      "hostType": "docker",
+      "matchHost": "ghcr.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "charts.bitnami.com"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "langfuse.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "qdrant.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "enapter.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "otwld.github.io"
+    }
+  ],
+
+  "packageRules": [
+    {
+      "description": "Group all non-major updates together",
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch"
+    },
+    {
+      "description": "Automerge non-major updates",
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "automerge": true
+    },
+    {
+      "description": "Require manual review for major updates",
+      "matchUpdateTypes": ["major"],
+      "labels": ["major-update"],
+      "automerge": false
+    },
+    {
+      "description": "Label Python dependencies",
+      "matchManagers": ["poetry", "pip_requirements"],
+      "addLabels": ["python"]
+    },
+    {
+      "description": "Label Node.js dependencies",
+      "matchManagers": ["npm"],
+      "addLabels": ["nodejs"]
+    },
+    {
+      "description": "Label Docker images",
+      "matchManagers": ["dockerfile", "docker-compose"],
+      "addLabels": ["docker"]
+    },
+    {
+      "description": "Label Helm charts",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "addLabels": ["helm"]
+    },
+    {
+      "description": "Label Kubernetes manifests",
+      "matchManagers": ["kubernetes"],
+      "addLabels": ["kubernetes"]
+    },
+    {
+      "description": "Automerge GitHub Actions updates",
+      "matchManagers": ["github-actions"],
+      "addLabels": ["github-actions"],
+      "automerge": true
+    },
+    {
+      "description": "Ignore malformed platform flags",
+      "matchPackageNames": [
+        "--platform=linux/amd64 python",
+        "--platform=linux/amd64 node"
+      ],
+      "enabled": false
+    },
+    {
+      "description": "Bitnami Helm charts",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["minio", "bitnami/nginx-ingress-controller"],
+      "registryUrls": ["https://charts.bitnami.com/bitnami"]
+    },
+    {
+      "description": "Langfuse Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["langfuse"],
+      "registryUrls": ["https://langfuse.github.io/langfuse-k8s"]
+    },
+    {
+      "description": "Qdrant Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["qdrant"],
+      "registryUrls": ["https://qdrant.github.io/qdrant-helm"]
+    },
+    {
+      "description": "KeyDB Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["keydb"],
+      "registryUrls": ["https://enapter.github.io/charts/"]
+    },
+    {
+      "description": "Ollama Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["ollama"],
+      "registryUrls": ["https://otwld.github.io/ollama-helm/"]
+    }
+  ],
+  "ignoreDeps": [],
+  "ignorePaths": [
+    "**/node_modules/**",
+    "**/vendor/**",
+    "**/__pycache__/**",
+    "**/venv/**",
+    "**/.venv/**"
+  ]
+}

.github/workflows/renovate.yml

@@ -0,0 +1,39 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '0 0 * * 0'
+  # Allow manual triggering
+  workflow_dispatch:
+    inputs:
+      logLevel:
+        description: 'Log level'
+        required: false
+        default: 'info'
+        type: choice
+        options:
+          - info
+          - debug
+      dryRun:
+        description: 'Dry run'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  renovate:
+    name: Renovate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Self-hosted Renovate
+        uses: renovatebot/[email protected]
+        with:
+          configurationFile: .github/renovate.json
+          token: ${{ secrets.RENOVATE_TOKEN }}
+        env:
+          LOG_LEVEL: ${{ inputs.logLevel || 'info' }}
+          RENOVATE_DRY_RUN: ${{ inputs.dryRun || false }}
+          RENOVATE_BASE_BRANCH_PATTERNS: deps-main
+          TZ: Europe/Berlin

infrastructure/README.md

@@ -311,8 +311,7 @@ backend:
     port: "8000" # Port on which the MCP server listens (default: 8000)
     host: "0.0.0.0" # Host address for the MCP server
     image:
-      repository: ghcr.io/stackitcloud/rag-template
-      name: rag-mcp
+      repository: ghcr.io/stackitcloud/rag-template/mcp-server
       pullPolicy: Always
       tag: "v1.0.0"
 ```

infrastructure/rag/templates/_admin_backend_and_extractor_helpers.tpl

@@ -74,11 +74,11 @@
 
 # image
 {{- define "adminBackend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.adminBackend.image.repository .Values.adminBackend.image.name .Values.adminBackend.image.tag | trimSuffix ":" }}
+{{- printf "%s:%s" .Values.adminBackend.image.repository .Values.adminBackend.image.tag | trimSuffix ":" }}
 {{- end -}}
 
 {{- define "extractor.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.extractor.image.repository .Values.extractor.image.name .Values.extractor.image.tag | trimSuffix ":" }}
+{{- printf "%s:%s" .Values.extractor.image.repository .Values.extractor.image.tag | trimSuffix ":" }}
 {{- end -}}
 
 # ingress

infrastructure/rag/templates/_admin_frontend_helpers.tpl

@@ -1,7 +1,7 @@
 {{- define "adminFrontend.fullImageName" -}}
 {{- if .Values.adminFrontend.image -}}
     {{- if .Values.adminFrontend.image.repository -}}
-        {{- printf "%s/%s:%s" .Values.adminFrontend.image.repository .Values.adminFrontend.image.name .Values.adminFrontend.image.tag | trimSuffix ":" }}
+        {{- printf "%s:%s" .Values.adminFrontend.image.repository .Values.adminFrontend.image.tag | trimSuffix ":" }}
     {{- else -}}
         {{ required "A valid .Values.adminFrontend.image.repository entry required!" . }}
     {{- end -}}

infrastructure/rag/templates/_backend_helpers.tpl

@@ -95,11 +95,11 @@
 {{- end -}}
 
 {{- define "backend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.backend.image.repository .Values.backend.image.name .Values.backend.image.tag | trimSuffix ":" | trimSuffix "-" }}
+{{- printf "%s:%s" .Values.backend.image.repository .Values.backend.image.tag | trimSuffix ":" | trimSuffix "-" }}
 {{- end -}}
 
 {{- define "mcp.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.backend.mcp.image.repository .Values.backend.mcp.image.name .Values.backend.mcp.image.tag | trimSuffix ":" | trimSuffix "-" }}
+{{- printf "%s:%s" .Values.backend.mcp.image.repository .Values.backend.mcp.image.tag | trimSuffix ":" | trimSuffix "-" }}
 {{- end -}}
 
 

infrastructure/rag/templates/_frontend_helpers.tpl

@@ -3,7 +3,7 @@
 {{- end -}}
 
 {{- define "frontend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.frontend.image.repository .Values.frontend.image.name .Values.frontend.image.tag | trimSuffix ":" -}}
+{{- printf "%s:%s" .Values.frontend.image.repository .Values.frontend.image.tag | trimSuffix ":" -}}
 {{- end -}}
 
 {{- define "ingress.frontendFullname" -}}

infrastructure/rag/values.yaml

@@ -68,17 +68,15 @@ backend:
     chatWithHistoryExamples: ""
 
     image:
-      repository: ghcr.io/stackitcloud/rag-template
-      name: rag-mcp
+      repository: ghcr.io/stackitcloud/rag-template/mcp-server
       pullPolicy: Always
       tag: "v2.0.0"
 
   name: backend
   replicaCount: 1
 
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: rag-backend
+    repository: ghcr.io/stackitcloud/rag-template/rag-backend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -216,8 +214,7 @@ frontend:
   name: frontend
   replicaCount: 1
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: frontend
+    repository: ghcr.io/stackitcloud/rag-template/frontend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -252,8 +249,7 @@ adminBackend:
   name: admin-backend
 
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: admin-backend
+    repository: ghcr.io/stackitcloud/rag-template/admin-backend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -333,8 +329,7 @@ extractor:
   replicaCount: 1
   name: extractor
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: document-extractor
+    repository: ghcr.io/stackitcloud/rag-template/document-extractor
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -382,8 +377,7 @@ adminFrontend:
   name: admin-frontend
   replicaCount: 1
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: admin-frontend
+    repository: ghcr.io/stackitcloud/rag-template/admin-frontend
     pullPolicy: Always
     tag: "v2.0.0"