feat: add upgrade-requester, fix Gitea auth to use GITEA_USERNAME env var

- Add request_upgrades.py and trigger-upgrade.sh - Add upgrade-cronjob.yaml and manual-trigger.yaml (WorkflowTemplate) - Fix git auth: use GITEA_USERNAME env var instead of hardcoded x-token (Gitea requires username:token format, not x-token:token)
2026-06-30 11:37:48 +00:00
parent 77017a0b59
commit 528da1e167
4 changed files with 468 additions and 0 deletions
@@ -0,0 +1,66 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: upgrade-requester
+  namespace: k8s-version-tracker
+  labels:
+    app: upgrade-requester
+spec:
+  # Every Monday at 09:00 UTC — one day after the Sunday version report
+  schedule: "0 9 * * 1"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      # 90 minutes: 60m approval window + time to clone, update, and push
+      activeDeadlineSeconds: 5400
+      template:
+        metadata:
+          labels:
+            app: upgrade-requester
+        spec:
+          serviceAccountName: upgrade-requester
+          restartPolicy: Never
+          containers:
+            - name: upgrade-requester
+              image: registry.storedbox.net/k8s-version-tracker:latest
+              imagePullPolicy: Always
+              command: ["python", "request_upgrades.py"]
+              env:
+                - name: MATTERMOST_WEBHOOK_URL
+                  valueFrom:
+                    secretKeyRef:
+                      name: version-tracker-secrets
+                      key: MATTERMOST_WEBHOOK_URL
+                - name: GITEA_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: version-tracker-secrets
+                      key: GITEA_TOKEN
+                - name: GITEA_REPO_URL
+                  value: "https://repo.adservio.us/ai_approver/argocd-gitops.git"
+                - name: GITEA_USERNAME
+                value: "ai_approver"
+              - name: GITEA_COMMITTER_NAME
+                  value: "k8s-version-tracker"
+                - name: GITEA_COMMITTER_EMAIL
+                  value: "k8s-version-tracker@themosers.club"
+                - name: APPROVAL_MIDDLEWARE_URL
+                  value: "http://192.168.87.14:8085"
+                - name: APPROVAL_TIMEOUT_MINUTES
+                  value: "60"
+                - name: APPROVAL_POLL_INTERVAL
+                  value: "30"
+              resources:
+                requests:
+                  cpu: 50m
+                  memory: 128Mi
+                limits:
+                  cpu: 200m
+                  memory: 256Mi
+
+---
+# Manual trigger:
+# kubectl create job --from=cronjob/upgrade-requester upgrade-manual -n k8s-version-tracker