Meet Renovate - Your Update Automation Bot for Kubernetes and More!

Keeping track of container image updates is hard. I started using Renovate Bot to to track these for me and I now get pull requests from a bot for my Docker and Kubernetes container images. It's a game changer.
Video Notes: technotim.live/posts/renovate...
A HUGE thanks to Datree for sponsoring this video!
Secure Your Kubernetes, Prevent Misconfigurations
www.datree.io
Support me on Patreon: / technotim
Sponsor me on GitHub: github.com/sponsors/timothyst...
Subscribe on Twitch: / technotim
Become a KZbin member: / @technotim
Merch Shop 🛍️: l.technotim.live/shop
Gear Recommendations: l.technotim.live/gear
Get Help in Our Discord Community: l.technotim.live/discord
2nd channel: / @technotimtalks
(Affiliate links may be included in this description. I may receive a small commission at no cost to you.)
00:00 - Renovate Bot in Less Than 2 Minutes.
01:45 - Sponsor: Datree - Secure Your Kubernetes, Prevent Misconfigurations
02:57 - Creating a Git Repo & Creating Resources
04:11 - Add Renovate Bot
05:05 - Our First (Real) Pull Request
06:54 - How to Handle “latest” tag
09:04 - Working with Helm Charts
09:44 - What else can we do with Renovate?
Thank you for watching!

[@MrAlucardDante]

That’s neat. For my homelab running docker compose stacks, I use DIUN, which is like watchtower but it doesn’t update the containers automatically and instead notifies you. And it supports discord out of the box, unlike watchtower. And it saves the digest on its own, so it works with latest tags without any config.

[@iamvinku]

Great video as always and +1 for Docker deployments!

[@cyberlightdev]

Definitely interested in the Docker implementation of this. Tackling Kubernetes is on my todo list, but it may be a while.

[@akshaynsit]

Thanks! Looks quite interesting. I'd be interested to see how this works with Drone for docker containers.

[@GodAtum]

Me too

[@ThereWillBeCake]

Would love to see a video on docker please mate. Watchtower keeps breaking things. Cheers for the video.

[@mathesonstep]

I set this up a few months ago, its awesome, I even setup automerge for minor versions

[@itsthebofh]

Very interesting, +1 for docker & docker swarm.

[@RonDLite]

Thanks Tim, that's exactly what I need ❤

[@giuseppebinetti87]

Wooow this is awesome!! Please add the video on how automate also docker deployments!!

[@codispatch6869]

This is very useful. Thanks for sharing 🙏

[@Lyallsmail]

I'd love to see how Renovate works with Docker deployment. Thanks for the Vid.

[@aymenboulila3356]

❤❤❤❤ you made my day ☺️ thanks

[@fanaticdavid]

I'd love to see a video about keeping a Docker stack up-to-date using Renovate, so it's a +1 from me!

[@Glitch_860]

renovate and docker deployments. Yes this topic would be of interest. I run a docker swarm for my homelab

[@romeozor]

would be cool if it had some info on possibly ignoring updates to some versions jumps, in case the upgrade would brake the app

[@optical_ideas]

Thats interesting, thanks. Btw. any notes on the music used in background? 🤔

[@ihateyoutubehandles]

Wow a lot of info to digest! :P

[@yukinok25]

I use Keel, is great and super easy to setup.

[@pixelsirae2439]

I was wondering when you were going to show that ^^

[@snuffelpuffs]

podman+ubi+buildah=happy days AND a secure life.

[@TheMrDrMs]

I'd love to see a video on installing Apprise, and mailrise!

[@pacholoamit]

Damn. It's like you read my mind.

[@MaxymVlasov]

Glad to see such a simple intro to Renovate. I hope it will be adopted everywhere in a few years. By the way, you don't need to change the image tag to SHA, just enable digest pining. Also, you can find useful next prod ready Sharable preset for Devops folks under the MIT license

[@MaxymVlasov]

GH - SpotOnInc/renovate-config (Sorry, youtube don't allow to post links and use most popular SVС hosting name...)

[@inf222]

1:40 "hired devops engineer for free" *nervous laught*

[@Fabian-_-]

It would be awesome if it could also note the changes between the versions but unfortunately theres no real standard to publish these I guess. Wanted to look into Renovate for some time now, thanks for the video!

[@neo85271]

Yeah this is a big pain point with how docker manages tags and labels. Pretty much anything goes. Renovate is an awesome tool, but when faced with some of the weird naming conventions I've run across, it's no miracle worker. Be prepared to learn some regex-js flavor syntax to get any kind of proper semantic versioning. Lack of useful container labels that point to the git repos or change logs is an issue I haven't figured out yet unfortunately.

[@TheOnlyEpsilonAlpha]

1:58 sounds promising, i still was looking for something like watchtower for kubernetes

[@phandr1x]

Watchtower first choice for docker

[@metallusmelandril7380]

I have watchtower and that’s working great. But this looks wayyyyyy better

[@neo85271]

If you've ever had a bad container update breaking everything it touches, a good CI solution like this can be a godsend. With a most reputable containers you'll get a nicely formatted change log with any breaking changes, so you can more easily avoid the carnage.

[@businessoftechnology]

Seems like Swarm, though still around didn't get mentioned. Does it run there?

[@neo85271]

Swarm is mostly dead unfortunately. No updates and very few are using it outside of the hobbyist space. But to answer your question, yes it can.

[@user-pc9th4xr6i]

What vscode theme do you use?

[@justinhadley317]

I vote for docker too, please and thank you

[@johnjbateman]

Don’t forget about Azure DevOps!

[@adolfoecs]

it is important that detecting new images does not replace doing your home work and see what you are installing. These kind of tools are not new but without tests to verify that this versions works it makes the task also very tedious

[@TechnoTim]

Good call however they will actually include a success rate too based on CI tests from other using Renovate!

[@RocketLR]

i just wrote a python script that goest through all my docker-compose files and upgrades the containers. Super simple xD

[@sysadmin-info]

During last three days I was learning about Kubernetes. It has a very high entrance level. A lot of knowledge is required to understand all the functions, namespaces, nodes, pods, configuration. The best option is to implement autocomplete for kubectl. The nightmare is yaml and on exam you do not have the Visual Studio Code where you see vertical lines that show you indents. So it is good to find out at the beginning how to do something similar in vim. Kubernetes is solid rock, it is hard to destroy by design working pods. Terraform is helpful. GitLab automation is also something that makes your life easier. Rancher is something that mostly is in use in companies. Anyway I will try this solution in my homelab. One more time saver is always good thing.

[@CamilMiller]

Hey I wanna know if you can help me build my home lab server

[@hongtanke]

Why not use dependabot?

[@l0gic23]

Why use it?

[@TechnoTim]

I think after GitHub acquired it it doesn't run on GitLab anymore. Also, they didn't support containers until recently.

[@dnddl9976]

First again 😂😂 thanks for nice videos

[@devKazuto]

I never update containers if I don't have to. Never change a running system :)

[@neo85271]

I hope you don't have any of those containers publicly accessible.

[@devKazuto]

@@neo85271 Nah, only my home network and to some who have access over VPN.

[@third-partysites3923]

First Itz Tony here