Kubernetes Hosted

apiVersion: batch/v1
kind: CronJob
metadata:
  name: renovate
  namespace: renovate
spec:
  schedule: '@hourly'
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      template:
        spec:
          containers:
            - name: renovate
              # Update this to the latest available and then enable Renovate on
              # the manifest
              image: renovate/renovate:39.104.1
              # Repository to be checked
              args:
                - user/repo
              # Environment Variables
              env:
                - name: LOG_LEVEL
                  value: debug
              envFrom:
                - secretRef:
                    name: renovate-env
          restartPolicy: Never

apiVersion: v1
kind: Secret
metadata:
  name: renovate-env
  namespace: renovate
type: Opaque
stringData:
  GITHUB_COM_TOKEN: 'any-personal-user-token-for-github-com-for-fetching-changelogs'
  # You can set RENOVATE_AUTODISCOVER to true to run Renovate on all repos you have push access to
  RENOVATE_AUTODISCOVER: 'false'
  RENOVATE_GIT_AUTHOR: 'Renovate Bot <[email protected]>'
  RENOVATE_PLATFORM: 'github'
  # (Optional) For enterprise purposes only
  RENOVATE_ENDPOINT: '<https://github.company.com/api/v3>'
  # (Optional) For enterprise purposes only
  RENOVATE_TOKEN: 'your-github-enterprise-renovate-user-token'

Self Signed Certificate

https://docs.renovatebot.com/examples/self-hosting/#self-signed-tlsssl-certificates