diff --git a/k8s-peterg/renovate-operator/renovate-job.yaml b/k8s-peterg/renovate-operator/renovate-job.yaml
index 1fdcfc7..3707624 100644
--- a/k8s-peterg/renovate-operator/renovate-job.yaml
+++ b/k8s-peterg/renovate-operator/renovate-job.yaml
@@ -19,7 +19,10 @@ spec:
         name: renovate-config
   extraVolumeMounts:
     - name: renovate-config
-      mountPath: /opt/renovate
+      mountPath: /config
+  extraEnvFrom:
+    - secretRef:
+        name: renovate-operator-docker-login
   extraEnv:
     - name: LOG_LEVEL
       value: debug
@@ -30,4 +33,4 @@ spec:
     - name: RENOVATE_GIT_AUTHOR
       value: "Renovate <renovate@peterg.nl>"
     - name: RENOVATE_CONFIG_FILE
-      value: /opt/renovate/config.json
+      value: /config/config.json
diff --git a/k8s-peterg/renovate-operator/values.yaml b/k8s-peterg/renovate-operator/values.yaml
index 88eaa44..d93c1d9 100644
--- a/k8s-peterg/renovate-operator/values.yaml
+++ b/k8s-peterg/renovate-operator/values.yaml
@@ -4,9 +4,12 @@ metrics:
   serviceMonitor:
     enabled: false
 
-image:
-  imagePullSecrets:
-    - name: renovate-operator-docker-login
+crd:
+  install: true
+  mode: template
+
+rbac:
+  ownNamespaceOnly: true
 
 route:
   enabled: true