frodeaa/renovate-aws

self-hosted Renovate with AWS CodeBuild

renovate-aws

This project enables self-hosting Renovate on AWS.

Configuration

The cloudformation/renovate.yml template supports following parameters:

Parameter	Description	Default
RenovateRepositories	comma separated list of repositories to run against
RenovateVersion	renovate version to use	latest
RenovateFlags	see --help for details about supported flags
RenovatePlatform	the platform	github
RenovateSchedule	schedule the renovate ScheduleExpressions	cron(45 23 ? * 1-5 *)
RenovatePlatformToken	token for the platform (github or gitlab)
TimeoutInMinutes	timeout for renovate build	10
ComputerType	computer to to use with renovate	BUILD_GENERAL1_SMALL
Image	build image used	aws/codebuild/nodejs:10.1.0

Installing

This project will setup an AWS CodeBuild project which will run Renovate on your GitHub or GitLab repositories.

Use the awscli to create the stack from the cloudformation/renovate.yml template or just click the "Launch Stack" button.

aws cloudformation create-stack \
    --stack-name renovate \
    --template-body "file://$(pwd)/cloudformation/renovate.yml" \
    --parameters ...

renovate-aws's Issues

setup ci

• validate cfn template (cnf-lint)
• test deploy stack

simplify SSM configuration

there will only be one token, either GitHub or GitLab. Use Conditions to handle what token
it is. Create only one AWS::SSM::Parameter with name depending on the RenovatePlatform

The embedded buildspec should use Conditions to decide what parameter to retrieve
from SSM

Support build triggers

Find a way to let the renovate CodeBuild be triggered automatically, i.e. every Monday

enable cache for renovate CodeBuild project

improve build time by cache the installed renovate module between runs

support private renovate config

The bucket location set by RenovateConfigLocation must be public
to allow the CodeBuild project to download it

Find a way to extend the role RenovateRole to grant access to private
S3 bucket