Authentication failure

[23ewrdtf]

Deployed using process below:

Added personal token (for RENOVATE_TOKEN) to a gitlab user with below permissions (read only for testing):

read_api, read_user, read_repository, read_registry

Applied below:

kubectl apply -f secret.yaml
helm upgrade --namespace renovate renovate renovate/renovate -f values.yaml --debug

secret.yaml

apiVersion: v1
kind: Secret
metadata:
  name: renovate-env
  namespace: renovate
type: Opaque
stringData:
  RENOVATE_TOKEN: 'xxxxxxx'

Values (only changed values shown) (I found how to do it here #198 (comment)):

renovate:
  existingConfigFile: "/usr/src/app/config.js"

existingSecret: 'renovate-env'

extraConfigmaps:
  - name: config
    data:
      config.js: |
        module.exports = {
          platform: "gitlab",
          autodiscover: "true",
          secrets: {
            RENOVATE_TOKEN: process.env.RENOVATE_TOKEN
          }
        }

extraVolumes:
  - name: renovate-extra-config
    configMap:
      name: renovate-extra-config

extraVolumeMounts:
  - name: renovate-extra-config
    mountPath: /usr/src/app/config.js
    subPath: config.js

Error:

kubectl logs test-kc5zf -n renovate
 WARN: Config needs migrating
       "originalConfig": {
         "platform": "gitlab",
         "autodiscover": "true",
         "secrets": {"RENOVATE_TOKEN": "***********"}
       },
       "migratedConfig": {
         "platform": "gitlab",
         "autodiscover": true,
         "secrets": {"RENOVATE_TOKEN": "***********"}
       }
FATAL: Authentication failure
 INFO: Renovate is exiting with a non-zero code due to the following logged errors
       "loggerErrors": [
         {
           "name": "renovate",
           "level": 60,
           "logContext": "DCigCzk18VgMnevu9NUXL",
           "msg": "Authentication failure"
         }
       ]

Question:
Is the RENOVATE_TOKEN enough to get authenticated to Gitlab? How do I specify user for the RENOVATE_TOKEN?

[viceice]

readonly token isn't enough.

please ask at main renovate repo discussions for config help.