展示HN：Renovate – Kubernetes 原生方式

展示HN：Renovate – Kubernetes 原生方式
Show HN: Renovate – The Kubernetes-Native Way

原始链接: https://github.com/mogenius/renovate-operator

## Renovate Operator：使用 Kubernetes 进行自托管依赖更新 Renovate Operator 将自动依赖更新的能力带到您自己的 Kubernetes 基础设施。与标准的自托管 Renovate 不同，此 Operator 通过 Kubernetes 原生功能提供增强的控制和可观察性。它利用自定义资源定义 (CRD) 进行声明式调度，从而实现诸如基于 cron 的运行、带有过滤器的自动发现以及具有并发控制的并行执行等功能。主要优势包括内置 Web UI、集群内项目跟踪、Prometheus 指标以及通过领导者选举实现的高可用性。本质上，该 Operator 在您的集群内管理 Renovate 任务，自动发现项目并根据您定义的参数安排更新。安装通过 Helm 简单直接，需要配置 KUBECONFIG。该项目正在积极维护中，并具有全面的测试和 linting 流程。

## Kubernetes Renovate Operator mogenius 发布了一个新的开源 Kubernetes operator，用于 Renovate，一个依赖更新工具。这个 operator 允许用户在 Kubernetes 集群内原生运行 Renovate，通过自定义资源定义 (CRD) 声明式地定义仓库配置。主要优势是消除了对 cron jobs 或托管服务的依赖，避免了外部依赖和潜在的 SaaS 锁定。它提供了完全的控制和透明度，并且没有计划中的货币化或付费层级。 Hacker News 上的初步讨论集中在 operator 的用例上——特别是它与现有的 Renovate 设置相比解决了什么问题。一位评论员强调了复杂配置的潜在好处，而其他人则质疑它的必要性。另一位用户推广了他们基于 AI 的 PR 安全扫描工具。

Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups lack.

Comparison with Mend Renovate CE

Feature	Mend Renovate CE	Renovate Operator
Fully open source, no signup or license key	❌	✅
Automated dependency updates	✅	✅
Runs on your own infrastructure	✅	✅
Auto-discovery	✅	✅
Webhook API for on-demand runs	✅	✅
Web UI	✅	✅
Declarative cron scheduling via CRD	❌	✅
Auto-discovery with group/topic filtering	❌	✅
Per-project status tracking in-cluster	❌	✅
Parallel execution with concurrency control	❌	✅
Prometheus metrics & health checks	❌	✅
Kubernetes-native pod scheduling	❌	✅
Leader election for high availability	❌	✅
Job lifecycle management (TTL, deadlines, retries)	❌	✅

At the defined time of your schedule, a renovate discovery job is started
After the discovery finished, you will be able to see all your discovered projects in the UI
All projects are now being set to be scheduled
Every 10 seconds the operator checks for schedules projects and starts a new renovate job
Only as many jobs as defined in spec.parallelism are getting executed at the same time

helm -n renovate-operator upgrade --install renovate-operator \
  oci://ghcr.io/mogenius/helm-charts/renovate-operator \
  --create-namespace --wait

Option 2: Helm Repository

helm repo add mogenius https://helm.mogenius.com/public --force-update
helm -n renovate-operator upgrade --install renovate-operator mogenius/renovate-operator --create-namespace --wait

Made with contrib.rocks.

Running the operator

Needs KUBECONFIG variable exported with the path to your local kube-config and a context you want to use.

Running Tests

Run the test-suite using just:

Run golangci-lint using just:

Run all checks (tests + linters):

Generate CRDs