# Plaintext secrets: never commit, back them up outside this folder
.secrets/

# Talos generated configs contain cluster PKI and admin credentials (any folder,
# e.g. a new edge's config generated next to talos/)
controlplane.yaml
worker.yaml
talosconfig
secrets.yaml
kubeconfig

# Retired dev edge credentials (cirrus_dev), kept locally only
old/

# Ignition output embeds the secrets above
*.ign