fix: misc

.renovate/autoMerge.json5

@@ -13,12 +13,12 @@
       description: "Auto merge minors and patches after minimumReleaseAge",
       matchDatasources: ["docker"],
       automerge: true,
-      automergeType: "pr",
+      automergeType: "branch",
       matchUpdateTypes: ["minor", "patch"],
       matchPackageNames: [
         "ghcr.io/renovatebot/renovate",
       ],
-      ignoreTests: false,
+      ignoreTests: true,
     },
   ]
 }

kubernetes/apps/cert-manager/cert-manager/app/prometheus-rules.yaml

@@ -25,7 +25,7 @@ spec:
           expr: |
             avg by (exported_namespace, namespace, name) (
             certmanager_certificate_expiration_timestamp_seconds - time())
-              < (21 * 24 * 3600)
+              < (14 * 24 * 3600)
           for: 15m
           labels:
             severity: warning

kubernetes/bootstrap/helmfile.d/00-crds.yaml

@@ -8,13 +8,7 @@ helmDefaults:
   cleanupOnFail: true
   wait: true
   waitForJobs: true
-  args:
-    - --include-crds
-    - --no-hooks
-  postRenderer: bash
-  postRendererArgs:
-    - -c
-    - yq ea --exit-status 'select(.kind == "CustomResourceDefinition")' -
+  args: ["--include-crds", "--no-hooks"] # Prevent helmfile apply or sync
 
 releases:
   - name: cloudflare-dns