feat(renovate): escalation-trigger metrics + fix bot token #26

Sammanfogat

supernaut sammanfogade 2 incheckningar från feat/global-renovate-phase-3 in i main

2026-07-08 20:31:35 +00:00

supernaut kommenterad

2026-07-08 20:31:28 +00:00

Ägare

Completes tenant Renovate infra (Phase 3): the run metrics that make the A→D
compute escalation trigger objective (§3.5), plus the bot-token fix that got
tenant runs green.

Changes

gitborg-renovate.sh.j2 — emit textfile metrics per run:
run_duration_seconds, peak_rss_bytes (from the container cgroup
memory.peak), repos_processed, prs_created (alongside the existing
last_run_status / last_run_timestamp_seconds).
vault.yml — re-vault a valid gitborg-renovate PAT (the old one was the
deleted renovate account's token → 401 on every run). Diff is large only
because Vault re-encrypts the whole file; one value changed.
defaults/main.yml — document renovate_autodiscover_filter (empty =
tenant mode: every repo the bot collaborates on, reconciler-gated).

Verify

Live-verified: a run reported duration ~10s, peak ~359 MiB (well under the
1.5 GiB cap), repos 1; authenticated and autodiscovered the collaborator-gated
set. Apply via the infra-apply skill (validate → --check → apply → confirm
metrics in Grafana).

Completes tenant Renovate infra (Phase 3): the run metrics that make the A→D compute escalation trigger objective (§3.5), plus the bot-token fix that got tenant runs green. ## Changes - **`gitborg-renovate.sh.j2`** — emit textfile metrics per run: `run_duration_seconds`, `peak_rss_bytes` (from the container cgroup `memory.peak`), `repos_processed`, `prs_created` (alongside the existing `last_run_status` / `last_run_timestamp_seconds`). - **`vault.yml`** — re-vault a valid `gitborg-renovate` PAT (the old one was the deleted `renovate` account's token → 401 on every run). _Diff is large only because Vault re-encrypts the whole file; one value changed._ - **`defaults/main.yml`** — document `renovate_autodiscover_filter` (empty = tenant mode: every repo the bot collaborates on, reconciler-gated). ## Verify Live-verified: a run reported duration ~10s, peak ~359 MiB (well under the 1.5 GiB cap), repos 1; authenticated and autodiscovered the collaborator-gated set. Apply via the `infra-apply` skill (validate → `--check` → apply → confirm metrics in Grafana).

supernaut lade till 2 incheckningar

2026-07-08 20:31:28 +00:00

fix(renovate): set a valid gitborg-renovate bot token ec69977c0c

feat(renovate): emit escalation-trigger run metrics 0250d09c8d