carto-selfhosted-helm/.gitignore at main · CartoDB/carto-selfhosted-helm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
*.tgz
/.idea/*
.vscode
.DS_Store
**/*key.json
**/k8s-google-serviceaccount-secret.yaml
**/*carto-secrets.yaml*
**/*carto-values.yaml*
**/customer.env
**/*customization.yaml*

# Git worktrees
.worktrees/

# Diagnostic bundles generated by Replicated Troubleshoot / KOTS.
# These are local debugging artifacts and should not be committed.
preflightbundle-*.tar.gz
support-bundle-*.tar.gz
analyzer-bundle-*.tar.gz

# Gitleaks report artifacts (produced by local runs and CI)
gitleaks-report.json

# Credential / secret file patterns — defense in depth.
# Belt-and-suspenders against accidental commits; secret-scanning + push
# protection are the primary line of defense.

# Google Cloud — Workload Identity Federation credential files written by
# google-github-actions/auth (the file pattern that caused the 2026-04-30 leak).
gha-creds-*.json
application_default_credentials.json
*.gcp-key.json
*-sa.json
service-account*.json

# AWS
.aws/credentials
.aws/config
aws-credentials*
*.pem
**/credentials.csv

# SSH / GPG / TLS private keys
*_rsa
*_ed25519
*_ecdsa
*_dsa
id_rsa*
id_ed25519*
*.ppk
*.pkcs12
*.p12
*.pfx
*.key
*.gpg
secring.*

# Kubernetes
kubeconfig
*.kubeconfig
*-kubeconfig

# Terraform
*.tfstate
*.tfstate.*
*.tfvars
!*.tfvars.example
.terraform/
terraform.rc

# Generic env / secret files
.env
.env.*
!.env.example
!.env.template
.envrc
secrets.yaml
secrets.yml
*.secret
*.secrets

# npm / yarn auth
.npmrc
!**/template.npmrc
.yarnrc.yml.local

# Helm values overrides commonly used to hold secrets locally
values.local.yaml
values-secrets.yaml
values-*-secrets.yaml