.DS_Store
*.tmp

# Real secrets: only secret.example.yaml is versioned.
# k8s/kustomization.yaml still references secret.yaml, so a fresh clone must
# create it first — see README.
k8s/secret.yaml

# TLS material
*.crt
*.key
*.pem