add a note not to apply encrypted secrets directly

Signed-off-by: Chanwit Kaewkasi <chanwit@gmail.com>
This commit is contained in:
Chanwit Kaewkasi
2020-11-25 22:02:09 +07:00
parent 0db06c8962
commit 99f5dbf16b

View File

@ -78,6 +78,9 @@ sops --encrypt \
You can now commit the encrypted secret to your Git repository.
!!! hint
Note that you shouldn't apply the encrypted secrets onto the cluster with kubectl. SOPS encrypted secrets are designed to be consumed by kustomize-controller.
## Configure secrets decryption
Registry the Git repository on your cluster: