diff --git a/charts/flyte-core/values-keycloak-idp-flyteclients-without-browser.yaml b/charts/flyte-core/values-keycloak-idp-flyteclients-without-browser.yaml
index 68dbeb594d4..505ac171495 100644
--- a/charts/flyte-core/values-keycloak-idp-flyteclients-without-browser.yaml
+++ b/charts/flyte-core/values-keycloak-idp-flyteclients-without-browser.yaml
@@ -303,6 +303,7 @@ secrets:
     # https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server
     # If mount is true, helm will mount `flyte-secret-auth`.
     # If mount is false, helm will not mount `flyte-secret-auth`.
+    # Note: Unsupported combination: create.true and mount.false.
     create: true
     mount: true
     clientSecret: "<>" # put the secret for the confidential client flytepropeller defined in the IDP
diff --git a/charts/flyte-core/values.yaml b/charts/flyte-core/values.yaml
index bc4a621c31f..bef9995ed8f 100755
--- a/charts/flyte-core/values.yaml
+++ b/charts/flyte-core/values.yaml
@@ -435,6 +435,7 @@ secrets:
     # https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server
     # If mount is true, helm will mount `flyte-secret-auth`.
     # If mount is false, helm will not mount `flyte-secret-auth`.
+    # Note: Unsupported combination: create.true and mount.false.
     create: true
     mount: true
     clientSecret: foobar
diff --git a/docs/deployment/configuration/auth_setup.rst b/docs/deployment/configuration/auth_setup.rst
index 026874650f1..46e8a0df361 100644
--- a/docs/deployment/configuration/auth_setup.rst
+++ b/docs/deployment/configuration/auth_setup.rst
@@ -350,6 +350,7 @@ Apply OIDC Configuration
              # https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server
              # If mount is true, helm will mount `flyte-secret-auth`.
              # If mount is false, helm will not mount `flyte-secret-auth`.
+             # Note: Unsupported combination: create.true and mount.false.
              create: true
              mount: true
            # Use the non-encoded version of the random password