nilsandClaude Opus 5.5
84fb3aac21
- The secrets template moves to k8s/secrets/, and the filled-in copy to
k8s/secrets/secrets.yaml (gitignored). `kubectl apply -f k8s/` does
not recurse, so neither the placeholder template nor the real secrets
can be applied by accident.
- The server image digest is pinned in server.yaml instead of through
kustomize's images override, which `-f` ignores (it would have pulled
a nonexistent :latest).
- README and kustomization.yaml say to use `-k`: plain `-f` never
creates the generated Grafana ConfigMaps.
- The IngressRoutes drop `tls: {}`, like the other routes on this
Traefik: TLS is configured on the websecure entrypoint.
Manifests validated both ways (14 resources rendered with kustomize,
11 as plain files — the difference is the Grafana ConfigMaps).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
46 lines
1.1 KiB
Plaintext
46 lines
1.1 KiB
Plaintext
*.iml
|
|
.gradle
|
|
/local.properties
|
|
/.idea/caches
|
|
/.idea/libraries
|
|
/.idea/modules.xml
|
|
/.idea/workspace.xml
|
|
/.idea/navEditor.xml
|
|
/.idea/assetWizardSettings.xml
|
|
.DS_Store
|
|
/build
|
|
/captures
|
|
.externalNativeBuild
|
|
.cxx
|
|
local.properties
|
|
|
|
# mise : mise.toml est COMMITÉ (il décrit le build). Seules les surcharges
|
|
# locales, machine-spécifiques, sont ignorées.
|
|
mise.local.toml
|
|
.mise.local.toml
|
|
|
|
# Local API configuration and dependencies.
|
|
/server/.env
|
|
/server/node_modules
|
|
|
|
# Signed build output. Rebuilt from source by ./gradlew assembleUnstableDebug and
|
|
# signed locally — a checked-in APK is stale the moment anything above it changes.
|
|
*.apk
|
|
*.idsig
|
|
|
|
# Local MG4 platform-signing material. Keep the working copies inside this
|
|
# checkout for self-contained release builds, but never publish private keys.
|
|
/tools/platform.pk8
|
|
/tools/platform.x509.pem
|
|
/tools/platform.key
|
|
/tools/platform.p12
|
|
|
|
# Build dirs of the vendored EVHardware library.
|
|
/EVHardware/build
|
|
/EVHardware/.gradle
|
|
/EVHardware/**/build
|
|
|
|
# Filled-in Kubernetes Secrets (copy of k8s/secrets/secrets.example.yaml). Never commit.
|
|
/k8s/secrets.yaml
|
|
/k8s/secrets/secrets.yaml
|