diff --git a/kubernetes/apps/security/vault/app/helmrelease.yaml b/kubernetes/apps/security/vault/app/helmrelease.yaml
index f4a8903..a14837d 100644
--- a/kubernetes/apps/security/vault/app/helmrelease.yaml
+++ b/kubernetes/apps/security/vault/app/helmrelease.yaml
@@ -55,6 +55,8 @@ spec:
         # Port number on which readinessProbe will be checked.
         port: *port
       extraEnvironmentVars:
+        # This is required because they will lose their values when the pod is upgraded in my experience.
+        # Probably a Flux thing.
         VAULT_CLUSTER_ADDR: http://$(HOSTNAME).vault-internal:8201
       extraSecretEnvironmentVars:
         - envName: AWS_SECRET_ACCESS_KEY