diff --git a/input/refdog/resources/index.md b/input/refdog/resources/index.md
index 4328cc7..20fd22d 100644
--- a/input/refdog/resources/index.md
+++ b/input/refdog/resources/index.md
@@ -79,6 +79,17 @@ following output resources:
 - A ServiceAccount, Role, and RoleBinding for running site components
 - A Secret containing a signing CA for site linking
 
+The output resources generated by the controller belong to the  
+`internal.skupper.io` API group. The controller acts as the field  
+manager and operator for these resources. They reflect the runtime  
+state that the controller derives from your input resources and should  
+not be edited directly.
+
+**Note:** Any manual changes made to `internal.skupper.io` resources  
+will be overwritten the next time the controller reconciles. To  
+change the behaviour of a site or link, update the corresponding  
+`skupper.io` input resource instead.
+
 #### Operations
 
 On Kubernetes:
diff --git a/refdog/config/resources/overview.md b/refdog/config/resources/overview.md
index c99b45e..750e008 100644
--- a/refdog/config/resources/overview.md
+++ b/refdog/config/resources/overview.md
@@ -32,6 +32,17 @@ following output resources:
 - A ServiceAccount, Role, and RoleBinding for running site components
 - A Secret containing a signing CA for site linking
 
+The output resources generated by the controller belong to the  
+`internal.skupper.io` API group. The controller acts as the field  
+manager and operator for these resources. They reflect the runtime  
+state that the controller derives from your input resources and should  
+not be edited directly.
+
+**Note:** Any manual changes made to `internal.skupper.io` resources  
+will be overwritten the next time the controller reconciles. To  
+change the behaviour of a site or link, update the corresponding  
+`skupper.io` input resource instead.
+
 #### Operations
 
 On Kubernetes: