diff --git a/kubernetes/infrastructure/renovate/renovate.yaml b/kubernetes/infrastructure/renovate/renovate.yaml
index 4cf2357..72da11f 100644
--- a/kubernetes/infrastructure/renovate/renovate.yaml
+++ b/kubernetes/infrastructure/renovate/renovate.yaml
@@ -1,5 +1,29 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
+metadata:
+  name: renovate-secrets
+  namespace: flux-system
+spec:
+  interval: 10m
+  timeout: 1m30s
+  retryInterval: 30s
+  targetNamespace: renovate
+  path: ./renovate
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    namespace: flux-system
+    name: home-cluster-ops-secrets
+  dependsOn:
+    - name: repositories
+      namespace: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
 metadata:
   name: renovate
   namespace: renovate
@@ -16,3 +40,11 @@ spec:
   dependsOn:
     - name: namespaces
       namespace: flux-system
+    - name: renovate-secrets
+      namespace: flux-system
+    - name: local-path-provisioner
+      namespace: local-path-storage
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: renovate-secrets