# Real secrets never go in git — only *.example.yaml templates do.
apps/**/secret.yaml
*.secret.yaml
.deploy-kubeconfig.b64
