diff --git a/renovate/.gitignore b/renovate/.gitignore
new file mode 100644
index 0000000..75002e0
--- /dev/null
+++ b/renovate/.gitignore
@@ -0,0 +1 @@
+/secret.yaml
\ No newline at end of file
diff --git a/renovate/renovate.yaml b/renovate/renovate.yaml
new file mode 100644
index 0000000..0fe645c
--- /dev/null
+++ b/renovate/renovate.yaml
@@ -0,0 +1,22 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: renovate
+  namespace: mulk
+spec:
+  schedule: '@hourly'
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: renovate
+              image: renovate/renovate:34.24.0
+              #env:
+              #  - name: LOG_LEVEL
+              #    value: debug
+              envFrom:
+                - secretRef:
+                    name: renovate-env
+          restartPolicy: Never