feat: add namespace override

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helmfile/helmfile-action](https://github.com/helmfile/helmfile-action) | action | patch | `v2.4.3` → `v2.4.4` |

---

### Release Notes

<details>
<summary>helmfile/helmfile-action (helmfile/helmfile-action)</summary>

### [`v2.4.4`](https://github.com/helmfile/helmfile-action/releases/tag/v2.4.4)

[Compare Source](https://github.com/helmfile/helmfile-action/compare/v2.4.3...v2.4.4)

##### What's Changed

- build(deps): bump [@&#8203;actions/http-client](https://github.com/actions/http-client) from 4.0.0 to 4.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;684](https://github.com/helmfile/helmfile-action/pull/684)
- build(deps): bump [@&#8203;actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;683](https://github.com/helmfile/helmfile-action/pull/683)
- build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.58.2 to 8.59.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;682](https://github.com/helmfile/helmfile-action/pull/682)
- build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.58.2 to 8.59.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;681](https://github.com/helmfile/helmfile-action/pull/681)
- build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.59.0 to 8.59.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;687](https://github.com/helmfile/helmfile-action/pull/687)
- build(deps-dev): bump [@&#8203;swc/core](https://github.com/swc/core) from 1.15.30 to 1.15.32 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;686](https://github.com/helmfile/helmfile-action/pull/686)
- build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.59.0 to 8.59.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;691](https://github.com/helmfile/helmfile-action/pull/691)
- build(deps-dev): bump globals from 17.5.0 to 17.6.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;688](https://github.com/helmfile/helmfile-action/pull/688)
- build(deps-dev): bump [@&#8203;swc/core](https://github.com/swc/core) from 1.15.32 to 1.15.33 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;689](https://github.com/helmfile/helmfile-action/pull/689)
- build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.59.1 to 8.59.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;690](https://github.com/helmfile/helmfile-action/pull/690)

**Full Changelog**: <https://github.com/helmfile/helmfile-action/compare/v2.4.3...v2.4.4>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: #56
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -28,6 +28,11 @@ on:
         required: false
         default: "{}"
         type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string
 
 jobs:
   detect-service-type:
@@ -74,9 +79,9 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
+        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
         with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
           secret-type: generic
           data: |
@@ -130,9 +135,10 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Deploy Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@f6f7844b9e6d9f5ac8cf4cdae8ada1a42755c036 # v2.4.4
         with:
           helmfile-args: apply
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
   # Summary job that always runs to show what was deployed

.gitea/workflows/release.yaml

@@ -23,6 +23,6 @@ jobs:
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -23,6 +23,11 @@ on:
         required: false
         default: "{}"
         type: string
+      namespace:
+        description: "Override the default namespace (extracted from repository name)"
+        required: false
+        default: ""
+        type: string
 
 jobs:
   detect-service-type:
@@ -69,9 +74,9 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
-        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
+        uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
         with:
-          namespace: ${{ steps.namespace.outputs.namespace }}
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
           lintType: dryrun
           manifests: "${{ inputs.k8s_dir }}"
 
@@ -95,9 +100,10 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate Helm
-        uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
+        uses: helmfile/helmfile-action@f6f7844b9e6d9f5ac8cf4cdae8ada1a42755c036 # v2.4.4
         with:
           helmfile-args: diff
+          namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
         env: ${{ fromJSON(inputs.helmfile_env) }}
 
   # Summary job that always runs to show what was validated

README.md

@@ -50,22 +50,24 @@ jobs:
 
 ### CI (`.gitea/workflows/ci.yaml`)
 
-| Parameter              | Description                                  | Default         | Required |
+| Parameter              | Description                                                     | Default         | Required |
-| ---------------------- | -------------------------------------------- | --------------- | -------- |
+| ---------------------- | --------------------------------------------------------------- | --------------- | -------- |
-| `k8s_dir`              | Path to Kubernetes manifests directory       | `k8s/`          | No       |
+| `k8s_dir`              | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
-| `helmfile_path`        | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
+| `helmfile_path`        | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
-| `skip_helm_validation` | Skip Helm validation even if helmfile exists | `false`         | No       |
+| `skip_helm_validation` | Skip Helm validation even if helmfile exists                    | `false`         | No       |
-| `helmfile_env`         | JSON object string passed as env to helmfile | `{}`            | No       |
+| `helmfile_env`         | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`            | Override the default namespace (extracted from repository name) | `""`            | No       |
 
 ### CD (`.gitea/workflows/cd.yaml`)
 
-| Parameter                        | Description                                  | Default         | Required |
+| Parameter                        | Description                                                     | Default         | Required |
-| -------------------------------- | -------------------------------------------- | --------------- | -------- |
+| -------------------------------- | --------------------------------------------------------------- | --------------- | -------- |
-| `k8s_dir`                        | Path to Kubernetes manifests directory       | `k8s/`          | No       |
+| `k8s_dir`                        | Path to Kubernetes manifests directory                          | `k8s/`          | No       |
-| `helmfile_path`                  | Path to helmfile.yaml                        | `helmfile.yaml` | No       |
+| `helmfile_path`                  | Path to helmfile.yaml                                           | `helmfile.yaml` | No       |
-| `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists | `false`         | No       |
+| `skip_helm_deployment`           | Skip Helm deployment even if helmfile exists                    | `false`         | No       |
-| `skip_shared_secrets_deployment` | Skip shared secrets deployment               | `false`         | No       |
+| `skip_shared_secrets_deployment` | Skip shared secrets deployment                                  | `false`         | No       |
-| `helmfile_env`                   | JSON object string passed as env to helmfile | `{}`            | No       |
+| `helmfile_env`                   | JSON object string passed as env to helmfile                    | `{}`            | No       |
+| `namespace`                      | Override the default namespace (extracted from repository name) | `""`            | No       |
 
 ## Directory Structure Requirements