chore(deps): update docker.io/library/alpine docker tag to v3.21.2

Install helm plugin helm-values-schema-json to generate a values.schema.json from multiple sources.

.drone.yml

@@ -3,14 +3,17 @@ kind: pipeline
 type: kubernetes
 name: linter
 
-platform:
-  os: linux
+clone:
+  disable: true
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: markdown lint
   commands:
   - markdownlint *.md
-  image: docker.io/volkerraschek/markdownlint:0.32.2
+  image: git.cryptic.systems/volker.raschek/markdownlint:0.43.0
   resources:
     limits:
       cpu: 150
@@ -28,7 +31,7 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   resources:
     limits:
       cpu: 150
@@ -48,13 +51,22 @@ kind: pipeline
 type: docker
 name: dry-run-amd64
 
+clone:
+  disable: true
+
+depends_on:
+- linter
+
 platform:
   os: linux
   arch: amd64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -62,12 +74,15 @@ steps:
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     tags: latest-amd64
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -81,72 +96,12 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
     - failure
 
-depends_on:
-- linter
-
-trigger:
-  branch:
-    exclude:
-    - master
-  event:
-  - pull_request
-  - push
-  repo:
-  - volker.raschek/helm-docker
-
----
-kind: pipeline
-type: docker
-name: dry-run-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    dockerfile: Dockerfile
-    dry_run: true
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/helm
-    tags: latest-arm-v7
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
 trigger:
   branch:
     exclude:
@@ -162,13 +117,22 @@ kind: pipeline
 type: docker
 name: dry-run-arm64-v8
 
+clone:
+  disable: true
+
+depends_on:
+- linter
+
 platform:
   os: linux
   arch: arm64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
     auto_tag: false
     dockerfile: Dockerfile
@@ -176,12 +140,15 @@ steps:
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     tags: latest-arm64-v8
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -195,15 +162,12 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
     - failure
 
-depends_on:
-- linter
-
 trigger:
   branch:
     exclude:
@@ -219,25 +183,37 @@ kind: pipeline
 type: docker
 name: latest-amd64
 
+clone:
+  disable: true
+
+depends_on:
+- linter
+
 platform:
   os: linux
   arch: amd64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
     auto_tag: false
     dockerfile: Dockerfile
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     tags: latest-amd64
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -251,70 +227,12 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
     - failure
 
-depends_on:
-- linter
-
-trigger:
-  branch:
-  - master
-  event:
-  - cron
-  - push
-  repo:
-  - volker.raschek/helm-docker
-
----
-kind: pipeline
-type: docker
-name: latest-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag: false
-    dockerfile: Dockerfile
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/helm
-    tags: latest-arm-v7
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-depends_on:
-- linter
-
 trigger:
   branch:
   - master
@@ -329,25 +247,37 @@ kind: pipeline
 type: docker
 name: latest-arm64-v8
 
+clone:
+  disable: true
+
+depends_on:
+- linter
+
 platform:
   os: linux
   arch: arm64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
     auto_tag: false
     dockerfile: Dockerfile
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     tags: latest-arm64-v8
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -361,15 +291,12 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
     - failure
 
-depends_on:
-- linter
-
 trigger:
   branch:
   - master
@@ -384,17 +311,32 @@ kind: pipeline
 type: kubernetes
 name: latest-manifest
 
+clone:
+  disable: true
+
+depends_on:
+- latest-amd64
+- latest-arm64-v8
+
+# docker.io/plugins/manifest only for amd64 architectures available
+node_selector:
+  kubernetes.io/os: linux
+  kubernetes.io/arch: amd64
+
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build-manifest
-  image: docker.io/plugins/manifest:latest
+  image: docker.io/plugins/manifest:1.4.0
   settings:
     auto_tag: false
     ignore_missing: true
     spec: manifest.tmpl
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -408,7 +350,7 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   resources:
     limits:
       cpu: 150
@@ -418,10 +360,65 @@ steps:
     - changed
     - failure
 
+trigger:
+  branch:
+  - master
+  event:
+  - cron
+  - push
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: latest-sync
+
+clone:
+  disable: true
+
 depends_on:
-- latest-amd64
-- latest-arm-v7
-- latest-arm64-v8
+- latest-manifest
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: latest-sync
+  commands:
+  - skopeo sync --all --src=docker --src-creds=$SRC_CRED_USERNAME:$SRC_CRED_PASSWORD --dest=docker --dest-creds=$DEST_CRED_USERNAME:$DEST_CRED_PASSWORD git.cryptic.systems/volker.raschek/helm docker.io/volkerraschek
+  environment:
+    SRC_CRED_USERNAME:
+      from_secret: git_cryptic_systems_container_registry_user
+    SRC_CRED_PASSWORD:
+      from_secret: git_cryptic_systems_container_registry_password
+    DEST_CRED_USERNAME:
+      from_secret: container_image_registry_user
+    DEST_CRED_PASSWORD:
+      from_secret: container_image_registry_password
+  image: quay.io/skopeo/stable:v1.17.0
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
 
 trigger:
   branch:
@@ -437,25 +434,34 @@ kind: pipeline
 type: docker
 name: tagged-amd64
 
+clone:
+  disable: true
+
 platform:
   os: linux
   arch: amd64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
+    auto_tag: true
     auto_tag_suffix: amd64
-    auto_tag: true
     dockerfile: Dockerfile
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
     build_args:
     - HELM_VERSION=${DRONE_TAG}
 
@@ -471,58 +477,7 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
-  when:
-    status:
-    - changed
-    - failure
-
-trigger:
-  event:
-  - tag
-  repo:
-  - volker.raschek/helm-docker
-
----
-kind: pipeline
-type: docker
-name: tagged-arm-v7
-
-platform:
-  os: linux
-  arch: arm
-
-steps:
-- name: build
-  image: docker.io/plugins/docker:latest
-  settings:
-    auto_tag_suffix: arm-v7
-    auto_tag: true
-    dockerfile: Dockerfile
-    force_tag: true
-    no_cache: true
-    purge: true
-    repo: volkerraschek/helm
-    username:
-      from_secret: container_image_registry_user
-    password:
-      from_secret: container_image_registry_password
-    build_args:
-    - HELM_VERSION=${DRONE_TAG}
-
-- name: email-notification
-  environment:
-    SMTP_FROM_ADDRESS:
-      from_secret: smtp_from_address
-    SMTP_FROM_NAME:
-      from_secret: smtp_from_name
-    SMTP_HOST:
-      from_secret: smtp_host
-    SMTP_USERNAME:
-      from_secret: smtp_username
-    SMTP_PASSWORD:
-      from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
@@ -539,25 +494,34 @@ kind: pipeline
 type: docker
 name: tagged-arm64-v8
 
+clone:
+  disable: true
+
 platform:
   os: linux
   arch: arm64
 
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build
-  image: docker.io/plugins/docker:latest
+  image: docker.io/plugins/docker:20.18.6
   settings:
-    auto_tag_suffix: arm64-v8
     auto_tag: true
+    auto_tag_suffix: arm64-v8
     dockerfile: Dockerfile
     force_tag: true
     no_cache: true
     purge: true
-    repo: volkerraschek/helm
+    mirror:
+      from_secret: docker_io_mirror
+    registry: git.cryptic.systems
+    repo: git.cryptic.systems/volker.raschek/helm
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
     build_args:
     - HELM_VERSION=${DRONE_TAG}
 
@@ -573,7 +537,7 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   when:
     status:
     - changed
@@ -590,17 +554,32 @@ kind: pipeline
 type: kubernetes
 name: tagged-manifest
 
+clone:
+  disable: true
+
+depends_on:
+- tagged-amd64
+- tagged-arm64-v8
+
+# docker.io/plugins/manifest only for amd64 architectures available
+node_selector:
+  kubernetes.io/os: linux
+  kubernetes.io/arch: amd64
+
 steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
 - name: build-manifest
-  image: docker.io/plugins/manifest:latest
+  image: docker.io/plugins/manifest:1.4.0
   settings:
     auto_tag: true
     ignore_missing: true
     spec: manifest.tmpl
     username:
-      from_secret: container_image_registry_user
+      from_secret: git_cryptic_systems_container_registry_user
     password:
-      from_secret: container_image_registry_password
+      from_secret: git_cryptic_systems_container_registry_password
 
 - name: email-notification
   environment:
@@ -614,7 +593,7 @@ steps:
       from_secret: smtp_username
     SMTP_PASSWORD:
       from_secret: smtp_password
-  image: docker.io/volkerraschek/drone-email:0.1.1
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
   resources:
     limits:
       cpu: 150
@@ -624,10 +603,62 @@ steps:
     - changed
     - failure
 
+trigger:
+  event:
+  - tag
+  repo:
+  - volker.raschek/helm-docker
+
+---
+kind: pipeline
+type: kubernetes
+name: tagged-sync
+
+clone:
+  disable: true
+
 depends_on:
-- tagged-amd64
-- tagged-arm-v7
-- tagged-arm64-v8
+- tagged-manifest
+
+steps:
+- name: clone
+  image: git.cryptic.systems/volker.raschek/git:1.4.0
+
+- name: tagged-sync
+  commands:
+  - skopeo sync --all --src=docker --src-creds=$SRC_CRED_USERNAME:$SRC_CRED_PASSWORD --dest=docker --dest-creds=$DEST_CRED_USERNAME:$DEST_CRED_PASSWORD git.cryptic.systems/volker.raschek/helm docker.io/volkerraschek
+  environment:
+    SRC_CRED_USERNAME:
+      from_secret: git_cryptic_systems_container_registry_user
+    SRC_CRED_PASSWORD:
+      from_secret: git_cryptic_systems_container_registry_password
+    DEST_CRED_USERNAME:
+      from_secret: container_image_registry_user
+    DEST_CRED_PASSWORD:
+      from_secret: container_image_registry_password
+  image: quay.io/skopeo/stable:v1.17.0
+
+- name: email-notification
+  environment:
+    SMTP_FROM_ADDRESS:
+      from_secret: smtp_from_address
+    SMTP_FROM_NAME:
+      from_secret: smtp_from_name
+    SMTP_HOST:
+      from_secret: smtp_host
+    SMTP_USERNAME:
+      from_secret: smtp_username
+    SMTP_PASSWORD:
+      from_secret: smtp_password
+  image: git.cryptic.systems/volker.raschek/drone-email:0.1.5
+  resources:
+    limits:
+      cpu: 150
+      memory: 150M
+  when:
+    status:
+    - changed
+    - failure
 
 trigger:
   event:

Dockerfile

@@ -1,16 +1,18 @@
-FROM docker.io/library/alpine:3.16
+FROM docker.io/library/alpine:3.21.2
 
 ARG HELM_VERSION
 
 RUN apk add bash curl git openssl && \
     curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 --output /tmp/install.sh
 
-RUN [[ ${HELM_VERSION} == "" ]]; bash /tmp/install.sh
-RUN [[ ${HELM_VERSION} != "" ]]; bash /tmp/install.sh --version ${HELM_VERSION}
+RUN if [[ -z "${HELM_VERSION+x}" ]]; then bash /tmp/install.sh; fi
+RUN if [[ -n "${HELM_VERSION+x}" ]]; then bash /tmp/install.sh --version "${HELM_VERSION}"; fi
 
 RUN rm /tmp/install.sh
 
-# Install additionally cm-push plugin
-RUN helm plugin install https://github.com/chartmuseum/helm-push.git
+# Install additionally helm plugins
+RUN helm plugin install https://github.com/chartmuseum/helm-push.git && \
+    helm plugin install https://github.com/helm-unittest/helm-unittest.git && \
+    helm plugin install https://github.com/losisin/helm-values-schema-json.git
 
 ENTRYPOINT [ "/usr/local/bin/helm" ]

Makefile

@@ -1,6 +1,6 @@
 # HELM_VERSION
 # Only required to install a specifiy version
-HELM_VERSION?=v3.10.0 # renovate: datasource=github-releases depName=helm/helm
+HELM_VERSION?=v3.16.4 # renovate: datasource=github-releases depName=helm/helm
 
 # CONTAINER_RUNTIME
 # The CONTAINER_RUNTIME variable will be used to specified the path to a
@@ -9,8 +9,8 @@ CONTAINER_RUNTIME?=$(shell which podman)
 
 # HELM_IMAGE_REGISTRY_NAME
 # Defines the name of the new container to be built using several variables.
-HELM_IMAGE_REGISTRY_NAME:=docker.io
-HELM_IMAGE_REGISTRY_USER:=volkerraschek
+HELM_IMAGE_REGISTRY_NAME:=git.cryptic.systems
+HELM_IMAGE_REGISTRY_USER:=volker.raschek
 
 HELM_IMAGE_NAMESPACE?=${HELM_IMAGE_REGISTRY_USER}
 HELM_IMAGE_NAME:=helm

manifest.tmpl

@@ -1,4 +1,4 @@
-image: volkerraschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
+image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
 {{#if build.tags}}
 tags:
 {{#each build.tags}}
@@ -8,18 +8,12 @@ tags:
 {{/if}}
 manifests:
   -
-    image: volkerraschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
+    image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
     platform:
       architecture: amd64
       os: linux
   -
-    image: volkerraschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm-v7
-    platform:
-      architecture: arm
-      os: linux
-      variant: v7
-  -
-    image: volkerraschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
+    image: git.cryptic.systems/volker.raschek/helm:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
     platform:
       architecture: arm64
       os: linux

renovate.json

@@ -1,8 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "assignees": [ "volker.raschek" ],
-  "automergeStrategy": "merge-commit",
-  "automergeType": "pr",
   "labels": [ "renovate" ],
   "packageRules": [
     {
@@ -11,6 +9,13 @@
       "matchManagers": "droneci",
       "matchUpdateTypes": [ "minor", "patch"]
     },
+    {
+      "description": "Automatically update patch version of used container images in docker files",
+      "addLabels": [ "renovate/container-image", "renovate/automerge" ],
+      "automerge": true,
+      "matchManagers": [ "dockerfile" ],
+      "matchUpdateTypes": [ "patch" ]
+    },
     {
       "addLabels": [ "renovate/helm", "renovate/automerge" ],
       "automerge": false,