f05ef49c69
Admit vergabe_demo_company as the third declared consumer, track the bounded provisioner and scoped controls, and refresh admission occupancy to 3/3. Overflow remains apps-pg-2 before any fourth. Assistant: grok Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
34 lines
847 B
Text
34 lines
847 B
Text
# Decrypted helm values — never commit plaintext secrets
|
|
helm/*.yaml
|
|
!helm/*.sops.yaml
|
|
!helm/*.yaml.template
|
|
!helm/openbao-values.yaml
|
|
!helm/openbao-middleware.yaml
|
|
!helm/openbao-ui-overlay-k8s.yaml
|
|
# Kubernetes manifests (no secrets) are safe to commit
|
|
!helm/*-cluster.yaml
|
|
!helm/*-networkpolicies.yaml
|
|
!helm/*-databases.yaml
|
|
!helm/*-backup.yaml
|
|
!helm/*-probe.yaml
|
|
!helm/vergabe-demo-company-role.yaml
|
|
!helm/vergabe-demo-company-database.yaml
|
|
|
|
# ArgoCD repository credentials — encrypt locally, never commit
|
|
argocd/repositories/*.repository.sops.yaml
|
|
!argocd/repositories/*.repository.sops.yaml.template
|
|
|
|
# Kubeconfig
|
|
*.kubeconfig
|
|
|
|
# Credential broker local lease/token material
|
|
.local/credential-leases/
|
|
*.openbao-token
|
|
|
|
# Python bytecode caches
|
|
__pycache__/
|
|
*.pyc
|
|
tools/vendor/bin/kubectl
|
|
|
|
# Derived local Repo Manager cache
|
|
.repo-manager/
|