Major refactoring to hexagonal (ports & adapters) architecture: - Add service layer (apikey_service, project_service) for business logic - Add webhook system with dispatcher and delivery tracking - Add command queue with priority-based processing - Add rate limiting with sliding window algorithm - Add audit logging for command execution - Add OpenTelemetry integration (traces, metrics, spans) - Add circuit breaker for fault tolerance - Add cached repository wrapper for performance - Add comprehensive validation package - Add Kubernetes client integration for pod management - Add database migrations (allowed_ips, audit_log, rate_limiting, queue, webhooks) - Add network policy and PodDisruptionBudget for k8s - Remove legacy executor and projects/registry packages - Untrack secrets.yaml (now managed via envault) - Add coverage.out to .gitignore - Add e2e test infrastructure with docker-compose - Add comprehensive documentation (API, architecture, operations, plans) - Add golangci-lint config and pre-commit hook Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
35 lines
447 B
Plaintext
35 lines
447 B
Plaintext
# Credentials - never commit
|
|
.claude/
|
|
*.credentials*
|
|
*.key
|
|
*.pem
|
|
.secrets
|
|
|
|
# Kubernetes secrets with real values (use *.example as template)
|
|
deployments/k8s/base/secrets.yaml
|
|
deployments/k8s/base/credentials.yaml
|
|
|
|
# Local development
|
|
.env.local
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
|
|
# Build artifacts
|
|
*.tar
|
|
*.gz
|
|
/rdev-api
|
|
coverage.out
|
|
|
|
# Deploy keys (generated, never commit)
|
|
*-deploy-key
|
|
*-deploy-key.pub
|
|
*-deploy-key.b64
|