How to use env variables within config.json

[mhubig]

Hi there, I'm new to renovate and I'm wondering if there is a best practice / recommended way to use secrets exposed as environment variables within the renovate config.json file.

I'm using renovate as a k8s cronjob an so I usually expose secrets to the cronjob pod like so:

env:
- name: ARTIFACTORY_PASSWORD
  valueFrom:
    secretKeyRef:
      name: renovate-secrets
      key: ARTIFACTORY_PASSWORD

Now I like to inject those variables into my config.json file, maybe like so:

{
  "dryRun": true,
  "logLevel": "debug",
  "platform": "gitlab",
  "token": "${GITLAB_TOKEN}",
  "endpoint": "https://my.gitlab.com/api/v4",
  "gitAuthor": "Renovate Bot <[email protected]>",
  "autodiscover": true,
  "autodiscoverFilter": "apps/**",
  "npmrc": "@dm:registry=my.artifactory.com/api/npm/repo-my\n//my.artifactory.com/api/npm/:_authToken=${NPM_TOKEN}",
  "hostRules": [
    {
      "platform": "maven",
      "endpoint": "https://my.artifactory.com",
      "username": "${ARTIFACTORY_USERNAME}",
      "password": "${ARTIFACTORY_PASSWORD}"
    }
  ]
}

Is there any way of doing this?

[rarkins]

It's impossible with a JSON file. Use config.ha instead so you can access process.env

[viceice]

config.ha > config.js 😏

[mhubig]

So the js equivalent of my config.json file would be something like this?

module.exports = {
  dryRun: true,
  logLevel: "debug",
  platform: "gitlab",
  token: `${process.env.GITLAB_TOKEN}`,
  endpoint: "https://my.gitlab.com/api/v4",
  gitAuthor: "Renovate Bot <[email protected]>",
  autodiscover: true,
  autodiscoverFilter: "apps/**",
  npmrc: `@dm:registry=my.artifactory.com/api/npm/repo-my\n//my.artifactory.com/api/npm/:_authToken=${process.env.NPM_TOKEN}`,
  hostRules: [
    {
      "platform": "maven",
      "endpoint": "https://my.artifactory.com",
      "username": `${process.env.ARTIFACTORY_USERNAME}`,
      "password": `${process.env.ARTIFACTORY_PASSWORD}`
    }
  ]
}

[viceice]

yes, some more simplify:

module.exports = {
  dryRun: true,
  logLevel: "debug",
  platform: "gitlab",
  token: process.env.GITLAB_TOKEN,
  endpoint: "https://my.gitlab.com/api/v4",
  gitAuthor: "Renovate Bot <[email protected]>",
  autodiscover: true,
  autodiscoverFilter: "apps/**",
  npmrc: `@dm:registry=my.artifactory.com/api/npm/repo-my\n//my.artifactory.com/api/npm/:_authToken=${process.env.NPM_TOKEN}`,
  hostRules: [
    {
      "platform": "maven",
      "endpoint": "https://my.artifactory.com",
      "username": process.env.ARTIFACTORY_USERNAME,
      "password": process.env.ARTIFACTORY_PASSWORD,
    }
  ]
}

No need to use string template for strings 😉

[mhubig]

Thanks a ton!