9b6b12a5da
All checks were successful
secrets-guard / encrypted (push) Successful in 6s
shell-lint / shellcheck (push) Successful in 7s
PR build (required check) / changes (pull_request) Successful in 6s
secrets-guard / encrypted (pull_request) Successful in 6s
shell-lint / shellcheck (pull_request) Successful in 7s
PR build (required check) / validate-observability (pull_request) Successful in 38s
PR build (required check) / build-frontend (pull_request) Successful in 1m6s
PR build (required check) / build-backend (pull_request) Successful in 1m25s
PR build (required check) / gate (pull_request) Successful in 2s
33 lines
1 KiB
Text
33 lines
1 KiB
Text
# Terraform state/vars are also ignored inside terraform/.gitignore; repeated here
|
|
# in case a stray file ever lands at repo root.
|
|
*.tfstate
|
|
*.tfstate.*
|
|
.terraform/
|
|
*.tfvars
|
|
!*.tfvars.example
|
|
crash.log
|
|
crash.*.log
|
|
|
|
# The SOPS+age private key must never be committed (deploy/secrets/*.yaml, the
|
|
# encrypted values, are meant to be committed).
|
|
age.key
|
|
*.age.key
|
|
|
|
.DS_Store
|
|
|
|
# lake-iceberg's pytest suite runs in place.
|
|
__pycache__/
|
|
*.pyc
|
|
|
|
# Host-side deploy state (deploy.sh): the live per-service image tags and the
|
|
# cross-repo deploy lock. Untracked on purpose -- they must survive the
|
|
# `git reset --hard` at the top of every deploy (deploy.sh's comments already
|
|
# assumed .image-tags.env was ignored; make it actually true so a stray
|
|
# `git clean` can't destroy the record of what's running).
|
|
deploy/.image-tags.env
|
|
deploy/.deploy.lock
|
|
deploy/.stack-image-tags.env
|
|
|
|
# LAN dev's mirror of the rendered secrets, for snap-confined Docker (see
|
|
# deploy-dev.sh / render-secrets.sh) -- plaintext, re-rendered every deploy.
|
|
deploy/dev-secrets.env
|