diff --git a/pkg/runtime/reconciler.go b/pkg/runtime/reconciler.go
index ddc94f4..7fced24 100644
--- a/pkg/runtime/reconciler.go
+++ b/pkg/runtime/reconciler.go
@@ -485,6 +485,14 @@ func (r *resourceReconciler) Sync(
 			return latest, err
 		}
 	} else if isReadOnly {
+		delta := r.rd.Delta(desired, latest)
+		if delta.DifferentAt("Spec") {
+			rlog.Info(
+				"desired resource state has changed, but resource is read-only - skipping update",
+				"skipped", true,
+				"diff", delta.Differences,
+			)
+		}
 		return latest, nil
 	} else {
 		if adoptionPolicy == AdoptionPolicy_AdoptOrCreate {