# Decrypted helm values — never commit plaintext secrets helm/*.yaml !helm/*.sops.yaml !helm/*.yaml.template # Kubeconfig *.kubeconfig