# Prevent committing plaintext secrets
*-secret.yaml
*-secret.yml
secret-*.yaml
secret-*.yml
secrets/
*-secrets.yaml
*-secrets.yml

# But allow sealed secrets
!*-sealedsecret.yaml
!*-sealedsecret.yml
!sealed-secret-*.yaml
!sealed-secret-*.yml