I’m trying to find a video that demonstrated automated container image updates for Kubernetes, similar to Watchtower for Docker. I believe the video was by @geerlingguy@mastodon.social but I can’t seem to find it. The closest functionality that I can find to what I recall from the video is k8s-digester. Some key features that were discussed include:
- Automatically update tagged version number (eg - Image:v1.1.0 -> Image:v1.2.0)
- Automatically update image based on tagged image’s digest for tags like “latest” or “stable”
- Track container updates through modified configuration files
- Ability to manage deploying updates through Git workflows to prevent unwanted updates
- Minimal (if any) downtime
- This may not have been in the video, but I believe it also discussed managing backups and rollback functionality as part of the upgrade process
While this tool may be used in a CI/CD pipeline, its not limited exclusively to Git repositories as it could be used to monitor container registries from various people or organizations. The tool/process may have also incorporated Ansible.
If you don’t know which video I’m referring to, do you have any suggestions on how to achieve this functionality?
EDIT: For anyone stumbling on this thread, the video was Meet Renovate - Your Update Automation Bot for Kubernetes and More! by @technotim@mastodon.social, which discusses the Kubernetes tool Renovate.
For kubernetes you can use keel, allows you to specify what type to of tags to update
For docker you can use watchtower, will need to read the docs since it uses labels to tell it how to update, but by default will go to the latest available versions
Keel looks nearly identical to what I’m looking for. I can’t quite recall how the functionality worked in what I watched, but I believe (one of the ways that) it worked was by creating a new git branch for each update. I see Keel has approval functionality, but I don’t see anything about git integration.
If you use Keel, do you just rely on Kubernetes deployment versions for update history and other tools for config backups?
I don’t believe it has any git integration and just updates the deployed manifests directly.
As far as revision history I’m not certain.
If you are looking for git integration you might want to look into Argo.
I found what I was looking for - Renovate. I was wrong about it making branches (just makes pull requests). Looking into it a little further though, it seems people use Renovate (to automate updates) in conjunction with something like Argo (to automate deployments).
I think Keel does both of those tasks? I still need to research the similarities/differences of Keel and Renovate a bit further. Thanks again for the recommendation!