monobase-infra-medicard/.gitignore at main · mycurelabs/monobase-infra-medicard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# Helm artifacts
*.tgz
charts/*/charts/
charts/*/Chart.lock

# Rendered manifests (generated by scripts)
rendered/

# Secrets (NEVER commit secrets)
*.secret.yaml
*-secret.yaml  # Match files like my-secret.yaml, but not external-secrets.yaml
!scripts/secrets/  # ALLOW: scripts/secrets/ is code, not secrets (must be before secrets/)
!infrastructure/secrets.yaml  # ALLOW: secrets.yaml schema files (no actual secrets)
!deployments/*/secrets.yaml   # ALLOW: secrets.yaml schema files (no actual secrets)
secrets/
.env
.env.local
credentials.json

# GCP Service Account Keys (NEVER commit)
.gcp/
*.json  # GCP service account keys are typically JSON files

# Age private keys (NEVER commit)
age.agekey
*.agekey
.age-key

# Plaintext secrets before encryption
*-plaintext.yaml
*.decrypted.yaml

# OpenTofu/Terraform state and cache
terraform/**/.terraform/
terraform/**/.terragrunt-cache/
terraform/**/*.tfstate
terraform/**/*.tfstate.backup
terraform/**/.terraform.lock.hcl
terraform/**/kubeconfig.yaml
*.tfstate
*.tfstate.backup
.terraform/
.terragrunt-cache/
values/cluster/.terraform.tfstate.lock.info

# IDE and OS files
.vscode/
.idea/
*.swp
*.swo
*~
.DS_Store
Thumbs.db

# Backup files
*.bak
*.backup

# Script-generated backups
backups/terraform-state/
backups/argocd-applications/

# Temporary files
tmp/
temp/
*.tmp

# Logs
*.log

# Node.js dependencies
node_modules/

**/charts/*.tgz
.playwright-mcp/