add a note not to apply encrypted secrets directly

Signed-off-by: Chanwit Kaewkasi <chanwit@gmail.com>
4 years ago · 99f5dbf16b
parent 0db06c8962
commit 99f5dbf16b
1 changed files with 3 additions and 0 deletions
--- a/docs/guides/mozilla-sops.md
+++ b/docs/guides/mozilla-sops.md
@ -78,6 +78,9 @@ sops --encrypt \

 You can now commit the encrypted secret to your Git repository.

+!!! hint
+    Note that you shouldn't apply the encrypted secrets onto the cluster with kubectl. SOPS encrypted secrets are designed to be consumed by kustomize-controller.
+
 ## Configure secrets decryption

 Registry the Git repository on your cluster: