feat: add upgrade-requester, fix Gitea auth to use GITEA_USERNAME env var

- Add request_upgrades.py and trigger-upgrade.sh - Add upgrade-cronjob.yaml and manual-trigger.yaml (WorkflowTemplate) - Fix git auth: use GITEA_USERNAME env var instead of hardcoded x-token (Gitea requires username:token format, not x-token:token)
2026-06-30 11:37:48 +00:00
parent 77017a0b59
commit 528da1e167
4 changed files with 468 additions and 0 deletions
@@ -0,0 +1,57 @@
+---
+# Argo WorkflowTemplate — submit from the Argo UI at http://192.168.87.8
+# or via:  kubectl create job --from=cronjob/upgrade-requester manual-$(date +%Y%m%d-%H%M) -n k8s-version-tracker
+apiVersion: argoproj.io/v1alpha1
+kind: WorkflowTemplate
+metadata:
+  name: upgrade-requester-manual
+  namespace: k8s-version-tracker
+  labels:
+    app: upgrade-requester
+spec:
+  entrypoint: run-upgrade
+  serviceAccountName: upgrade-requester
+  templates:
+    - name: run-upgrade
+      container:
+        image: registry.storedbox.net/k8s-version-tracker:latest
+        imagePullPolicy: Always
+        command: ["python", "request_upgrades.py"]
+        env:
+          - name: MATTERMOST_WEBHOOK_URL
+            valueFrom:
+              secretKeyRef:
+                name: version-tracker-secrets
+                key: MATTERMOST_WEBHOOK_URL
+          - name: GITEA_TOKEN
+            valueFrom:
+              secretKeyRef:
+                name: version-tracker-secrets
+                key: GITEA_TOKEN
+          - name: GITEA_REPO_URL
+            value: "https://repo.adservio.us/ai_approver/argocd-gitops.git"
+          - name: GITEA_USERNAME
+            value: "ai_approver"
+          - name: GITEA_COMMITTER_NAME
+            value: "k8s-version-tracker"
+          - name: GITEA_COMMITTER_EMAIL
+            value: "k8s-version-tracker@themosers.club"
+          - name: APPROVAL_MIDDLEWARE_URL
+            value: "http://192.168.87.14:8085"
+          - name: APPROVAL_TIMEOUT_MINUTES
+            value: "60"
+          - name: APPROVAL_POLL_INTERVAL
+            value: "30"
+        resources:
+          requests:
+            cpu: 50m
+            memory: 128Mi
+          limits:
+            cpu: 200m
+            memory: 256Mi
+        volumeMounts:
+          - name: tmp
+            mountPath: /tmp
+  volumes:
+    - name: tmp
+      emptyDir: {}