From 99f5dbf16b80b78e211366b9eb42fac361ed2429 Mon Sep 17 00:00:00 2001
From: Chanwit Kaewkasi <chanwit@gmail.com>
Date: Wed, 25 Nov 2020 22:02:09 +0700
Subject: [PATCH] add a note not to apply encrypted secrets directly

Signed-off-by: Chanwit Kaewkasi <chanwit@gmail.com>
---
 docs/guides/mozilla-sops.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/guides/mozilla-sops.md b/docs/guides/mozilla-sops.md
index e9b8aa67..ed9f9848 100644
--- a/docs/guides/mozilla-sops.md
+++ b/docs/guides/mozilla-sops.md
@@ -78,6 +78,9 @@ sops --encrypt \
 
 You can now commit the encrypted secret to your Git repository.
 
+!!! hint
+    Note that you shouldn't apply the encrypted secrets onto the cluster with kubectl. SOPS encrypted secrets are designed to be consumed by kustomize-controller.
+
 ## Configure secrets decryption
 
 Registry the Git repository on your cluster: