ci: add renovate action

.github/renovate.json

@@ -0,0 +1,137 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "timezone": "UTC",
+  "schedule": ["before 4am"],
+  "labels": ["renovate"],
+  "semanticCommits": "enabled",
+  "semanticCommitType": "chore",
+  "semanticCommitScope": "deps",
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 50,
+  "stabilityDays": 7,
+  "repositories": ["stackitcloud/rag-template"],
+  "hostRules": [
+    {
+      "hostType": "docker",
+      "matchHost": "ghcr.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "charts.bitnami.com"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "langfuse.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "qdrant.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "enapter.github.io"
+    },
+    {
+      "hostType": "helm",
+      "matchHost": "otwld.github.io"
+    }
+  ],
+
+  "packageRules": [
+    {
+      "description": "Group all non-major updates together",
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "groupName": "all non-major dependencies",
+      "groupSlug": "all-minor-patch"
+    },
+    {
+      "description": "Automerge non-major updates",
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "automerge": true
+    },
+    {
+      "description": "Require manual review for major updates",
+      "matchUpdateTypes": ["major"],
+      "labels": ["major-update"],
+      "automerge": false
+    },
+    {
+      "description": "Label Python dependencies",
+      "matchManagers": ["poetry", "pip_requirements"],
+      "addLabels": ["python"]
+    },
+    {
+      "description": "Label Node.js dependencies",
+      "matchManagers": ["npm"],
+      "addLabels": ["nodejs"]
+    },
+    {
+      "description": "Label Docker images",
+      "matchManagers": ["dockerfile", "docker-compose"],
+      "addLabels": ["docker"]
+    },
+    {
+      "description": "Label Helm charts",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "addLabels": ["helm"]
+    },
+    {
+      "description": "Label Kubernetes manifests",
+      "matchManagers": ["kubernetes"],
+      "addLabels": ["kubernetes"]
+    },
+    {
+      "description": "Automerge GitHub Actions updates",
+      "matchManagers": ["github-actions"],
+      "addLabels": ["github-actions"],
+      "automerge": true
+    },
+    {
+      "description": "Ignore malformed platform flags",
+      "matchPackageNames": [
+        "--platform=linux/amd64 python",
+        "--platform=linux/amd64 node"
+      ],
+      "enabled": false
+    },
+    {
+      "description": "Bitnami Helm charts",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["minio", "bitnami/nginx-ingress-controller"],
+      "registryUrls": ["https://charts.bitnami.com/bitnami"]
+    },
+    {
+      "description": "Langfuse Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["langfuse"],
+      "registryUrls": ["https://langfuse.github.io/langfuse-k8s"]
+    },
+    {
+      "description": "Qdrant Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["qdrant"],
+      "registryUrls": ["https://qdrant.github.io/qdrant-helm"]
+    },
+    {
+      "description": "KeyDB Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["keydb"],
+      "registryUrls": ["https://enapter.github.io/charts/"]
+    },
+    {
+      "description": "Ollama Helm chart",
+      "matchManagers": ["helm-requirements", "helm-values", "helmv3"],
+      "matchPackageNames": ["ollama"],
+      "registryUrls": ["https://otwld.github.io/ollama-helm/"]
+    }
+  ],
+  "ignoreDeps": [],
+  "ignorePaths": [
+    "**/node_modules/**",
+    "**/vendor/**",
+    "**/__pycache__/**",
+    "**/venv/**",
+    "**/.venv/**"
+  ]
+}

.github/workflows/renovate.yml

@@ -0,0 +1,39 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '0 0 * * 0'
+  # Allow manual triggering
+  workflow_dispatch:
+    inputs:
+      logLevel:
+        description: 'Log level'
+        required: false
+        default: 'info'
+        type: choice
+        options:
+          - info
+          - debug
+      dryRun:
+        description: 'Dry run'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  renovate:
+    name: Renovate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v43.0.5
+        with:
+          configurationFile: .github/renovate.json
+          token: ${{ secrets.RENOVATE_TOKEN }}
+        env:
+          LOG_LEVEL: ${{ inputs.logLevel || 'info' }}
+          RENOVATE_DRY_RUN: ${{ inputs.dryRun || false }}
+          RENOVATE_BASE_BRANCH_PATTERNS: deps-main
+          TZ: Europe/Berlin

infrastructure/README.md

@@ -311,8 +311,7 @@ backend:
     port: "8000" # Port on which the MCP server listens (default: 8000)
     host: "0.0.0.0" # Host address for the MCP server
     image:
-      repository: ghcr.io/stackitcloud/rag-template
-      name: rag-mcp
+      repository: ghcr.io/stackitcloud/rag-template/mcp-server
       pullPolicy: Always
       tag: "v1.0.0"
 ```

infrastructure/rag/templates/_admin_backend_and_extractor_helpers.tpl

@@ -74,11 +74,11 @@
 
 # image
 {{- define "adminBackend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.adminBackend.image.repository .Values.adminBackend.image.name .Values.adminBackend.image.tag | trimSuffix ":" }}
+{{- printf "%s:%s" .Values.adminBackend.image.repository .Values.adminBackend.image.tag | trimSuffix ":" }}
 {{- end -}}
 
 {{- define "extractor.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.extractor.image.repository .Values.extractor.image.name .Values.extractor.image.tag | trimSuffix ":" }}
+{{- printf "%s:%s" .Values.extractor.image.repository .Values.extractor.image.tag | trimSuffix ":" }}
 {{- end -}}
 
 # ingress

infrastructure/rag/templates/_admin_frontend_helpers.tpl

@@ -1,7 +1,7 @@
 {{- define "adminFrontend.fullImageName" -}}
 {{- if .Values.adminFrontend.image -}}
     {{- if .Values.adminFrontend.image.repository -}}
-        {{- printf "%s/%s:%s" .Values.adminFrontend.image.repository .Values.adminFrontend.image.name .Values.adminFrontend.image.tag | trimSuffix ":" }}
+        {{- printf "%s:%s" .Values.adminFrontend.image.repository .Values.adminFrontend.image.tag | trimSuffix ":" }}
     {{- else -}}
         {{ required "A valid .Values.adminFrontend.image.repository entry required!" . }}
     {{- end -}}

infrastructure/rag/templates/_backend_helpers.tpl

@@ -95,11 +95,11 @@
 {{- end -}}
 
 {{- define "backend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.backend.image.repository .Values.backend.image.name .Values.backend.image.tag | trimSuffix ":" | trimSuffix "-" }}
+{{- printf "%s:%s" .Values.backend.image.repository .Values.backend.image.tag | trimSuffix ":" | trimSuffix "-" }}
 {{- end -}}
 
 {{- define "mcp.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.backend.mcp.image.repository .Values.backend.mcp.image.name .Values.backend.mcp.image.tag | trimSuffix ":" | trimSuffix "-" }}
+{{- printf "%s:%s" .Values.backend.mcp.image.repository .Values.backend.mcp.image.tag | trimSuffix ":" | trimSuffix "-" }}
 {{- end -}}
 
 

infrastructure/rag/templates/_frontend_helpers.tpl

@@ -3,7 +3,7 @@
 {{- end -}}
 
 {{- define "frontend.fullImageName" -}}
-{{- printf "%s/%s:%s" .Values.frontend.image.repository .Values.frontend.image.name .Values.frontend.image.tag | trimSuffix ":" -}}
+{{- printf "%s:%s" .Values.frontend.image.repository .Values.frontend.image.tag | trimSuffix ":" -}}
 {{- end -}}
 
 {{- define "ingress.frontendFullname" -}}

infrastructure/rag/values.yaml

@@ -68,17 +68,15 @@ backend:
     chatWithHistoryExamples: ""
 
     image:
-      repository: ghcr.io/stackitcloud/rag-template
-      name: rag-mcp
+      repository: ghcr.io/stackitcloud/rag-template/mcp-server
       pullPolicy: Always
       tag: "v2.0.0"
 
   name: backend
   replicaCount: 1
 
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: rag-backend
+    repository: ghcr.io/stackitcloud/rag-template/rag-backend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -216,8 +214,7 @@ frontend:
   name: frontend
   replicaCount: 1
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: frontend
+    repository: ghcr.io/stackitcloud/rag-template/frontend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -252,8 +249,7 @@ adminBackend:
   name: admin-backend
 
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: admin-backend
+    repository: ghcr.io/stackitcloud/rag-template/admin-backend
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -333,8 +329,7 @@ extractor:
   replicaCount: 1
   name: extractor
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: document-extractor
+    repository: ghcr.io/stackitcloud/rag-template/document-extractor
     pullPolicy: Always
     tag: "v2.0.0"
 
@@ -382,8 +377,7 @@ adminFrontend:
   name: admin-frontend
   replicaCount: 1
   image:
-    repository: ghcr.io/stackitcloud/rag-template
-    name: admin-frontend
+    repository: ghcr.io/stackitcloud/rag-template/admin-frontend
     pullPolicy: Always
     tag: "v2.0.0"