chore: enables docker ecosystem for dependabot

[nilekhc]

Signed-off-by: Nilekh Chaudhari 1626598+nilekhc@users.noreply.github.com

Reason for Change:

Requirements

• squashed commits
• included documentation
• added unit tests and e2e tests (if applicable).

Issue Fixed:

Does this change contain code from or inspired by another project?

• Yes
• No

If "Yes," did you notify that project's maintainers and provide attribution?

Special Notes for Reviewers:

[jeffwidman]

I'm playing around with this on a local fork to see how it works...

Unfortunately, I realized the check isn't recursive, so you'll need to manually specify the actual directory containing the chart... I filed dependabot/dependabot-core#6047 for us to evaluate changing that behavior.

[jeffwidman]

And looks like there's another bug, even when you do get it configured correctly: dependabot/dependabot-core#6048

I'll try to debug ☝️ tomorrow.

[jeffwidman]

I enabled the kubernetes_updates feature flag on this repo, so Dependabot will be trying to update Docker image tags within Helm/K8s files.

Once I get dependabot/dependabot-core#6048 fixed, hopefully it will start working and opening PR's for you.

[jeffwidman]

Also, thanks again @nilekhc for offering this repo as a test case, even for using in my own fork it's been great to have much more realistic data for testing than anything I'd put together quickly.

[nilekhc]

I enabled the kubernetes_updates feature flag on this repo, so Dependabot will be trying to update Docker image tags within Helm/K8s files.

Once I get dependabot/dependabot-core#6048 fixed, hopefully it will start working and opening PR's for you.

@jeffwidman Do you still want me to update the path and point it to the values.yaml directory?

[nilekhc]

Also, thanks again @nilekhc for offering this repo as a test case, even for using in my own fork it's been great to have much more realistic data for testing than anything I'd put together quickly.

We are happy to help! 🙂

[nilekhc]

I enabled the kubernetes_updates feature flag on this repo, so Dependabot will be trying to update Docker image tags within Helm/K8s files.
Once I get dependabot/dependabot-core#6048 fixed, hopefully it will start working and opening PR's for you.

@jeffwidman Do you still want me to update the path and point it to the values.yaml directory?

@jeffwidman Any word on this?

[jeffwidman]

Yes, please do point the path at the values.yaml directories... we won't support recursion out of the gate, and not sure if/when we would do that as there's a lot more product questions/edge cases, so you'll need to manually specify any directories that you want watched.

Beyond that, I figured out why it wasn't working on my fork of your repo, and fixed some other bugs along the way:

• Add values-other.yaml & other_values.yaml to test cases dependabot/dependabot-core#6094
• DRY up the matching filename list dependabot/dependabot-core#6095
• Helm supports both .yml and .yaml dependabot/dependabot-core#6096
• Update helm charts beyond values.yaml dependabot/dependabot-core#6097

Once the last one is merged/deployed, this should all start working... but we have an internal deploy freeze because of GitHub Universe so I won't be able to deploy til late tomorrow or Friday.

[jeffwidman]

All the PR's have been merged, and this now works correctly on my fork... once you merge, can you confirm it works correctly here as well? You should get a PR opened by Dependabot similar to the ones here: https://github.com/jeffwidman/secrets-store-csi-driver-provider-azure/pulls

[aramase]

lgtm