Skip to content

chore(renovate): ignore manifests/prd/** in renovate config - #222

Merged
kid merged 1 commit into
mainfrom
chore/renovate-ignore-generated-manifests
Aug 14, 2026
Merged

chore(renovate): ignore manifests/prd/** in renovate config#222
kid merged 1 commit into
mainfrom
chore/renovate-ignore-generated-manifests

Conversation

@kid

@kid kid commented Aug 13, 2026

Copy link
Copy Markdown
Owner

Summary

Test plan

  • `nix flake check --print-build-logs` passes

🤖 Generated with Claude Code

https://claude.ai/code/session_01CezjyaVpC3FVPTUECp7cMR

kid added a commit that referenced this pull request Aug 14, 2026
…d nixhelm

manifests/prd/** is now Renovate-ignored (#222), which means Renovate has
no visibility into version pins for the new dendritic k8s app set at all —
not just the openebs CSI sidecars, but every .nix-embedded version string.

Adds a customManagers regex entry that tracks any `# renovate:
datasource=... depName=...`-annotated pin under modules/kubernetes/**,
and annotates the 7 that exist today: the 5 openebs CSI sidecar tags, plus
argocd's and gateway-api-crds' fetchFromGitHub revs. Renovate PRs bumping
a rev still need the paired Nix `hash` fixed by hand afterward — the
hosted app can't run postUpgradeTasks to recompute it, so nix flake check
will fail loudly with the correct hash until that's done.

Also enables Renovate's (beta) nix manager, scoped to just the nixhelm
flake input via packageRules — the only lever available for keeping
nixhelm-sourced chart versions (cilium, cert-manager, coredns, openebs's
driver) moving, since none of those are literal strings anywhere in this
repo. Deliberately not opened up to other flake inputs (nixpkgs
especially) given how much unrelated surface those could touch.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CezjyaVpC3FVPTUECp7cMR
Renovate's kubernetes/helm-values/flux managers all match any *.yaml in
the repo, so it started proposing direct edits to nixidy-generated
manifests (e.g. #215-#221 bumping openebs's CSI sidecar images) — those
get silently reverted on the next `write-manifests` run and would trip
the checks.manifests drift check if merged. Version bumps for anything
under manifests/prd/** need to happen in the Nix source instead.
@kid
kid force-pushed the chore/renovate-ignore-generated-manifests branch from 64f942b to 8bb3879 Compare August 14, 2026 14:16
@kid
kid merged commit 8bb3879 into main Aug 14, 2026
1 check passed
@kid
kid deleted the chore/renovate-ignore-generated-manifests branch August 14, 2026 14:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant