Setup renovate bot

[mxmxchere]

Now that we have a CI that can automatically vote on PRs and tell whether they are executing successfully or not we can setup a bot that will create PRs automatically. This issue is part of #433 and can be a starting point to regularly check on all kind of dependencies.

General tasks that need to be done to use renovate:

• create bot account (for renovate) #592
• decide and use execution platform (for renovate) #593

Dependencies that should be tracked by renovate:

• k8s version(s)
• configure renovate to track cluster-api and cluster-api-provider-openstack dependency #595
• cilium
• cilium-cli
• kind
• sonobuoy
• calico (done with Renovate regex improvements #622)
• calico-cli (same as calico)
• nginx-ingress
• flux
• cert-manager
• metrics-server
• helm
• OCCM
• OCSI
• k9s #628
• Upgrade version of the terraform openstack provider #607

[chess-knight]

k9s ?

[berendt]

Ping me on Matrix if you want me to activate the Renovate app here on the Repo.

[DEiselt]

@mxmxchere and i discussed further possible improvements.

• enable automerge. This can be activate because Renovate has to wait for the Github Branch protection rules anyway.
• limit number of parallel Renovate PRs. This is because Renovate automatically rebases PRs if something is merged into main. Thus combining the e2e-tests with Renovate PRs would result in unnecessary work and repetition
• add package rules to include custom zuul configs if required. For example Update dependency projectcalico/calico to v3.26.3 #623 (calico).