From 95bccdcef9db6de6fdf0e4e8d3b70d1f1068354b Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Wed, 16 Aug 2023 20:45:30 +0200
Subject: [PATCH] fix(renovate): dont automerge cilium minors

---
 projects/core/values/cilium.yaml | 9 ++++++++-
 renovate.json                    | 2 +-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/projects/core/values/cilium.yaml b/projects/core/values/cilium.yaml
index 445c70a7..08ce7566 100644
--- a/projects/core/values/cilium.yaml
+++ b/projects/core/values/cilium.yaml
@@ -842,7 +842,14 @@ hubble:
       className: ingress-internal
       annotations:
         cert-manager.io/cluster-issuer: vault-issuer
-        traefik.ingress.kubernetes.io/router.tls: 'true'
+        nginx.ingress.kubernetes.io/auth-url: |-
+            http://ak-outpost-hubble.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
+        nginx.ingress.kubernetes.io/auth-signin: |-
+            https://auth.dc/outpost.goauthentik.io/start?rd=$escaped_request_uri
+        nginx.ingress.kubernetes.io/auth-response-headers: |-
+            Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
+        nginx.ingress.kubernetes.io/auth-snippet: |
+            proxy_set_header X-Forwarded-Host $http_host;
       hosts:
         - cilium.dc
       tls:
diff --git a/renovate.json b/renovate.json
index 4ccc4ae5..03695e4a 100644
--- a/renovate.json
+++ b/renovate.json
@@ -87,7 +87,7 @@
         "requiredStatusChecks": null,
         "schedule": "after 1am and before 5am",
         "updateTypes": ["minor", "patch"],
-        "excludePackageNames": []
+        "excludePackagePatterns": [ ".*cilium.*", ".*hubble.*", ".*cilium/operator"]
       },
       {
         "datasources": ["helm"],