diff --git a/infra/renovate/templates/secrets.yaml b/infra/renovate/templates/secrets.yaml
new file mode 100644
index 0000000..0506c89
--- /dev/null
+++ b/infra/renovate/templates/secrets.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: vault
+
+---
+
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: openclarity-postgres-secret
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: openclarity-postgres-secret
+  data:
+    - secretKey: renovate-config
+      remoteRef:
+        key: kv/renovate
+        property: config
diff --git a/infra/renovate/values.yaml b/infra/renovate/values.yaml
index c378fc5..969c10d 100644
--- a/infra/renovate/values.yaml
+++ b/infra/renovate/values.yaml
@@ -95,7 +95,7 @@ renovate:
 
   renovate:
     # -- Custom exiting global renovate config
-    existingConfigFile: ''
+    existingConfigFile: 'renovate-config'
     # -- Inline global renovate config.json
     config: ''
     # See https://docs.renovatebot.com/self-hosted-configuration