kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

helmCharts:
  - name: cilium
    repo: oci://quay.io/cilium-charts-dev
    # renovate: datasource=docker depName=cilium registryUrl=https://quay.io/cilium-charts-dev versioning=regex:^(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)-dev-dev.(?<build>\d+)-(?<compatibility>.+)-(?<revision>.+)$
    version: 1.16.0-dev-dev.572-main-e421c0fd6e
    namespace: kube-system
    releaseName: cilium
    includeCRDs: true

renovate.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":gitSignOff",
    ":dependencyDashboard",
  ],
  "prConcurrentLimit": 0,
  "prHourlyLimit": 0,
  "gitAuthor": "renovate[bot] <bot@renovateapp.com>",
  "includePaths": [
    "kustomization.yaml",
  ],
  "hostRules": [
    {
      "matchHost": "quay.io",
      "username": "",
      "password": ""
    }
  ],
  "baseBranches": [
    "main"
  ],
  "labels": [
    "kind/dependency-update",
  ],
  "packageRules": [],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Support overriding datasource and registryUrl for kustomizations using helm charts from OCI repositories",
      "fileMatch": [
        "(^|/)kustomization\\.ya?ml$",
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: packageName=(?<packageName>.+?))?(?: registryUrl=(?<registryUrl>.+?))?(?: depType=(?<depType>.+?))?(?: extractVersion=(?<extractVersion>.+?))?(?: versioning=(?<versioning>.+?))?\\s+.+?:\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"
      ]
    },
  ],
}

renovate.sh

docker run --rm -ti -e LOG_LEVEL=debug -e GITHUB_COM_TOKEN="$(gh auth token)" -v /tmp:/tmp -v ${PWD}:/usr/src/app docker.io/renovate/renovate:full renovate --platform=local | tee renovate.log