[gurinderu]

Why

Renovate Dashboard #11 shows:

Failed to look up docker package containers.cloudless.dev/release/{crd-controller,crd-api,crd-admission,crd-vm-api,crd-operator-chart,linstor-nic-sync}: no-result

The zot registry containers.cloudless.dev is private, and Renovate has no credentials for it. Because of that, lightmare bumps (e.g. #410) have been done by hand.

What

This adds a hostRules entry to .github/renovate.json for containers.cloudless.dev (hostType: docker). It authenticates as the user renovate with the password {{ secrets.ZOT_RENOVATE_PASSWORD }}.

Prerequisites (infra)

• The infra side is creating a read-only zot user renovate. It gets read on release/** and no create/update/delete.
• Terraform generates its password into Vault. That password must be added in the Mend portal as the repo secret ZOT_RENOVATE_PASSWORD.

DO NOT MERGE

Don't merge until the ZOT_RENOVATE_PASSWORD secret exists in Mend and the zot user is live.

After merge

• Check that the "Failed to look up docker package containers.cloudless.dev/..." warning is gone from Dashboard Renovate Dashboard 🤖 #11.
• Check that lightmare bump PRs appear for testnet/mainnet.
• Stage is unaffected: its chart comes from the lightmare git tag spectrum-stage.