ci: validate Renovate manifests with kubeconform

.gitea/workflows/renovate-ci.yaml

@@ -30,9 +30,16 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          for manifest in renovate/k8s/namespace.yaml renovate/k8s/configmap.yaml renovate/k8s/cronjob.yaml; do
-            kubectl apply --dry-run=client --validate=false -f "$manifest" >/dev/null
-          done
+          docker run --rm \
+            -v "$PWD:/work" \
+            -w /work \
+            ghcr.io/yannh/kubeconform:latest \
+            -strict \
+            -ignore-missing-schemas \
+            -summary \
+            renovate/k8s/namespace.yaml \
+            renovate/k8s/configmap.yaml \
+            renovate/k8s/cronjob.yaml
 
       - name: Validate Renovate repository config
         shell: bash