diff --git a/kubernetes/namespaces/kube-system/reflector/README.md b/kubernetes/namespaces/kube-system/reflector/README.md
new file mode 100644
index 00000000..aaeceb70
--- /dev/null
+++ b/kubernetes/namespaces/kube-system/reflector/README.md
@@ -0,0 +1,11 @@
+# Kubernetes reflector
+
+We use [kubernetes-reflector](github.com/emberstack/kubernetes-reflector) to mirror certificate resources into all namespaces that need access to the wildcard certificates used for the cluster.
+
+It is deployed using Helm with no additional configuration using the following steps:
+
+``` sh
+$ helm repo add emberstack https://emberstack.github.io/helm-charts
+$ helm repo update
+$ helm upgrade -n kube-system --install reflector emberstack/reflector
+```