diff --git a/modules/k8s.nix b/modules/k8s.nix
index 88cd9c4..2da2e9a 100644
--- a/modules/k8s.nix
+++ b/modules/k8s.nix
@@ -117,6 +117,13 @@ let
             }
 
             [ -z "$namespace" ] && echo "namespace must be set" && exit 1
+
+            if [ "$apply" = delete ]; then
+                echo "WARNING: Really delete $(basename $TOP)? YES/no:"
+                read ans
+                [ "$ans" != YES ] && exit 0
+            fi
+
             export_vars
             EOF
         '';