diff --git a/renovate/k8s/cronjob.yaml b/renovate/k8s/cronjob.yaml
index cbb228d..6b7add2 100644
--- a/renovate/k8s/cronjob.yaml
+++ b/renovate/k8s/cronjob.yaml
@@ -10,6 +10,9 @@ spec:
   failedJobsHistoryLimit: 3
   jobTemplate:
     spec:
+      # Reap finished job pods (including manual `create job --from` runs,
+      # which history limits never delete). Keeps a day for debugging.
+      ttlSecondsAfterFinished: 86400
       backoffLimit: 1
       template:
         spec: