diff --git a/infra/renovate/templates/secrets.yaml b/infra/renovate/templates/secrets.yaml
index 382e370..0ff2cad 100644
--- a/infra/renovate/templates/secrets.yaml
+++ b/infra/renovate/templates/secrets.yaml
@@ -16,7 +16,7 @@ spec:
   target:
     name: renovate-config-secret
   data:
-    - secretKey: renovate-config-secret
+    - secretKey: renovate.json
       remoteRef:
         key: kv/renovate
         property: config
diff --git a/infra/renovate/values.yaml b/infra/renovate/values.yaml
index 7de924a..b774e26 100644
--- a/infra/renovate/values.yaml
+++ b/infra/renovate/values.yaml
@@ -181,9 +181,9 @@ renovate:
         name: renovate-config-secret
 
   extraVolumeMounts:
-    - name: renovate-config
-      mountPath: /config
-      subPath: renovate.json
+    - mountPath: "/config"
+      name: renovate.json
+      readOnly: true
 
   # -- Additional containers to the pod
   extraContainers: []