Bernd Worsch
7daef079c2
Some checks failed
railiance-tests / smoke (push) Has been cancelled
Add .sops.yaml policy targeting *.sops.yaml files using the shared age key from railiance-infra. Migrate helm/gitea-values.yaml to encrypted helm/gitea-values.sops.yaml. Pins all postgresql-ha passwords (postgresql, postgres, repmgr, pgpool, pgpool-admin, sr-check) so helm upgrade never regenerates secrets and breaks the running cluster. Fixes WP-0003 T01. Usage: helm upgrade gitea gitea/gitea -n default -f <(sops -d helm/gitea-values.sops.yaml) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
83 lines
1.1 KiB
Plaintext
83 lines
1.1 KiB
Plaintext
# OS / Editor cruft
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.swp
|
|
*.swo
|
|
*.bak
|
|
*.tmp
|
|
*~
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
*.pyd
|
|
*.egg-info/
|
|
.eggs/
|
|
.venv/
|
|
venv/
|
|
env/
|
|
|
|
# Node (in case UI helpers creep in)
|
|
node_modules/
|
|
npm-debug.log
|
|
yarn-debug.log
|
|
yarn-error.log
|
|
.pnpm-debug.log
|
|
|
|
# Ansible
|
|
*.retry
|
|
# Local inventory (never commit host IPs/secrets)
|
|
ansible/hosts.ini
|
|
hosts
|
|
.secrets/
|
|
.vault_pass.txt
|
|
|
|
# Helm / Kubernetes
|
|
charts/*.tgz
|
|
# Helm release cache
|
|
.helm/
|
|
# Kustomize build output
|
|
kustomize-build/
|
|
# Kubernetes local config
|
|
.kube/
|
|
*.kubeconfig
|
|
|
|
# Terraform (if used later)
|
|
.terraform/
|
|
terraform.tfstate
|
|
terraform.tfstate.backup
|
|
*.tfvars
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
|
|
# Coverage / test artifacts
|
|
.coverage
|
|
coverage.xml
|
|
htmlcov/
|
|
.junit/
|
|
*.out
|
|
*.err
|
|
|
|
# Git + tooling
|
|
.gitattributes.lock
|
|
.editorconfig.lock
|
|
|
|
# Local Railiance config
|
|
# (token + credentials must *never* be committed)
|
|
.railiance_gitea.conf
|
|
|
|
# Backup dropoff links (contain upload tokens)
|
|
*backup-dropoff-link*
|
|
|
|
# SOPS: never commit decrypted values files
|
|
# Encrypted versions (*.sops.yaml) are safe to commit
|
|
helm/*-values.yaml
|
|
|
|
# IDE configs
|
|
.vscode/
|
|
.idea/
|
|
*.iml
|