53d34bc4f4
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
38 lines
983 B
Text
38 lines
983 B
Text
# Decrypted helm values — never commit plaintext secrets
|
|
helm/*.yaml
|
|
!helm/*.sops.yaml
|
|
!helm/*.yaml.template
|
|
!helm/openbao-values.yaml
|
|
!helm/openbao-middleware.yaml
|
|
!helm/openbao-ui-overlay-k8s.yaml
|
|
# Kubernetes manifests (no secrets) are safe to commit
|
|
!helm/*-cluster.yaml
|
|
!helm/*-networkpolicies.yaml
|
|
!helm/*-databases.yaml
|
|
!helm/*-backup.yaml
|
|
!helm/*-probe.yaml
|
|
!helm/vergabe-demo-company-role.yaml
|
|
!helm/vergabe-demo-company-database.yaml
|
|
!helm/playwright-consumer-access.yaml
|
|
|
|
# ArgoCD repository credentials — encrypt locally, never commit
|
|
argocd/repositories/*.repository.sops.yaml
|
|
!argocd/repositories/*.repository.sops.yaml.template
|
|
|
|
# Kubeconfig
|
|
*.kubeconfig
|
|
|
|
# Credential broker local lease/token material
|
|
.local/credential-leases/
|
|
*.openbao-token
|
|
|
|
# Python bytecode caches
|
|
__pycache__/
|
|
*.pyc
|
|
tools/vendor/bin/kubectl
|
|
|
|
# Derived local Repo Manager cache
|
|
.repo-manager/
|
|
|
|
# Generated workstation orientation; keep local, regenerate from State Hub.
|
|
/.custodian-brief.md
|