mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 17:34:31 +00:00
15df3ecc08
Follow-up to the ansible excision: remove other artifacts that should never have been tracked, and extend .gitignore so they do not come back. Removed: - ssl/prole/*.key, *.crt, *.srl -- prole.org-era private keys, registry and DB CA material. References in knoe/core/env.py (auto-detect path at :1488) are best-effort inside try/except, so deletion is safe. - ssl/prole.ssl.tar -- tarball of the same material. - deploy/opentofu/k3s/terraform.tfstate -- 114KB committed OpenTofu state snapshot with live cluster UIDs. tfstate is never supposed to live in git. - docs/deploy_gke.log, docs/deploy_gke_done.log, docs/compressed-history.log -- deploy-time log captures. - end_time.txt, start_time.txt, start_time_final.txt -- ansible wall- clock timing breadcrumbs. - network_description.txt, network_prompt.txt -- local scratch prompts. - sidekiq_logs.txt -- transient log capture. - test_resolve.sh -- ad-hoc debug script. .gitignore additions: - *.tfstate, *.tfstate.backup - /ssl/ - .ai/ - /end_time.txt, /start_time*.txt, /sidekiq_logs.txt, /network_description.txt, /network_prompt.txt, /test_resolve.sh, /docs/deploy_*.log, /docs/compressed-history.log Note: the purged SSL keys remain in git history until the deferred history-scrub pass (task #14). The repo will be created as Private in git.knoe.dev so this is acceptable for now; it MUST be scrubbed before any broader visibility change. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
108 lines
1.9 KiB
Plaintext
108 lines
1.9 KiB
Plaintext
/.DS_Store
|
|
**/.DS_Store
|
|
/.gitignore
|
|
# Python artifacts
|
|
**/__pycache__/
|
|
*.py[cod]
|
|
*$py.class
|
|
*.pyc
|
|
|
|
# Build and distribution
|
|
/build/
|
|
/dist/
|
|
/installer/build/
|
|
/installer/dist/
|
|
/prole-app/dist/
|
|
/prole-app/dist-*/
|
|
/prole-tools-app/dist/
|
|
/prole-tools-app/.build/
|
|
/prole-tools-app/.build-cli/
|
|
|
|
# Binaries and generated tools
|
|
/net/prole-agent
|
|
/net/prole-scan
|
|
/bin/prole-agent
|
|
/bin/prole-scan
|
|
|
|
# MagicMock artifacts (likely accidental)
|
|
/MagicMock/
|
|
|
|
/bin/*
|
|
!/bin/prole-env.sh
|
|
!/bin/prole-kpf.sh
|
|
/lib/
|
|
/include/
|
|
/.idea/
|
|
/.vagrant/
|
|
/.vscode/
|
|
/.venv/
|
|
/prole-tools-app/.build/
|
|
/prole-tools-app/.build-cli/
|
|
/prole/backup/
|
|
|
|
# Secrets and local config
|
|
*.kubeconfig
|
|
*.kubeconfig*
|
|
etc/secrets/
|
|
*-password.txt
|
|
*secret.yaml
|
|
.vault_pass
|
|
/conf/prole.cfg
|
|
/secrets/
|
|
# etc/secrets/ holds plaintext values for secretref:// indirection.
|
|
# The directory is ignored, but keep the .keep marker tracked so forks see
|
|
# the pattern and know to create the directory locally.
|
|
!etc/secrets/.keep
|
|
/data/
|
|
/logs/
|
|
/storage/
|
|
# Runtime data directories — never version-controlled
|
|
knoe-db/data/
|
|
var/
|
|
/target/
|
|
/pyvenv.cfg
|
|
.output.txt
|
|
deploy/gcp/terraform-setup.txt
|
|
.terraform/
|
|
.terraform.lock.hcl
|
|
*.tfstate
|
|
*.tfstate.backup
|
|
|
|
# SSL material — never check in private keys
|
|
/ssl/
|
|
|
|
# Local MCP / AI tooling config (personal, per-clone)
|
|
.ai/
|
|
|
|
# Ad-hoc run artifacts — deploy.sh and friends leave these in the repo root
|
|
/end_time.txt
|
|
/start_time.txt
|
|
/start_time_final.txt
|
|
/sidekiq_logs.txt
|
|
/network_description.txt
|
|
/network_prompt.txt
|
|
/test_resolve.sh
|
|
/docs/deploy_*.log
|
|
/docs/compressed-history.log
|
|
|
|
# Large binaries
|
|
*.zip
|
|
*.tar.gz
|
|
|
|
# Ansible
|
|
.ansible/
|
|
|
|
# Coverage and testing
|
|
.coverage
|
|
htmlcov/
|
|
.pytest_cache/
|
|
|
|
/ssh-keys/
|
|
/mock_val/secrets/
|
|
/mock_val/secrets/
|
|
/prole-auth/target/surefire-reports/org.prole.auth.session.SessionTokenServiceTest.txt
|
|
/prole-auth/target/surefire-reports/org.prole.auth.web.VerifyControllerTest.txt
|
|
/prole-db.iml
|
|
supabase/helm/generated/values.generated.json
|
|
/.claude/
|