Request to allow postUpgradeTasks in cert-manager GH org

[erikgb]

Tell us more.

I am a cert-manager maintainer, a fairly popular CNCF Graduated project. We recently migrated from Dependabot to Renovate to get more automation of dependency management. This migration has been fairly successful, and our Renovate configuration is improved every day. 🎉

We first attempted to use the Renovate GH App, but soon discovered that it did not work with our CI and Makefiles, as post upgrade tasks are disallowed when running Renovate with the App. This forced us to run self-hosted Renovate using the Renovate GH action with support from Octo STS to avoid unwanted long-lived static secrets.

While our setup works, the Renovate App would have provided a much better user/maintainer experience. You probably know what I am referring to. 😆

Would Mend consider granting the Mend-hosted Renovate App installed in cert-manager GH org permissions to use postUpgradeTasks? If yes, what would be the command requirements? We currently have some quite complex post-upgrade tasks implemented in Make, but we will consider adjustments to fulfill eventual requirements to make this happen.

[jamietanna]

Hey @erikgb apologies for the delay, we'd missed this one 🙇

Taking a look now, and confirming internally based on what I can see for your current postUpgradeTasks used

[erikgb]

Thanks a lot @jamietanna! Really appreciated! I will start the migration tonight.

[erikgb]

@jamietanna, we have now migrated all our projects using Renovate GH workflow to the Mend-hosted app. This works great except for cert-manager/cert-manager, where we are getting a kernel-out-of-memory error, ref. https://developer.mend.io/github/cert-manager/cert-manager/-/job/9a4ef84f-fb1c-4ade-acfb-2b8ff8ec9f4c (last attempt to retry the job). Is this something you could help us with?

[jamietanna]

@erikgb apologies, I had allowlisted those commands, but I also should've upgraded you to the "Community (OSS)" plan on the Mend Developer Platform.

I've done that now, and kicked off a job which will take into account the new memory requirements

Now you're on the Community (OSS) plan, you're also entitled to:

• 2 concurrent jobs per organisation (i.e. 2 of your 22 repos on the org will process concurrently)
• double memory (6GB)
• access to Merge Confidence Workflows - you'll be able to use matchConfidence to group PRs based on the Merge Confidence

Please give us a shout if you have any feedback, in particular on Merge Confidence Workflows!

[erikgb]

Thanks a lot, @jamietanna! This looks great, and we really appreciate the OSS project support from Mend!

[jamietanna]

I'd also like to say thanks for all the hard work y'all do on Cert Manager too 💜