mirror of
https://github.com/ghndrx/k8s-game-2048.git
synced 2026-02-10 06:45:07 +00:00
feat: Complete PII cleanup and fully automatic pipeline
🧹 PII Cleanup & Security: - Remove all hardcoded domains (darknex.us, hndrx.co) - Remove all hardcoded emails (admin@ references) - Replace all personal info with environment variables - Repository now 100% generic and reusable 🚀 Fully Automatic Pipeline: - Pipeline now runs automatically develop → staging → production - No manual intervention required for production promotions - Auto-promotion triggers after successful tests - All workflows use commit-specific image tags 🔧 Environment Variables: - All manifests use ${VARIABLE_NAME} syntax - All scripts source from .env file - GitHub Actions use secrets for sensitive data - Complete .env.example template provided 📚 Documentation: - New comprehensive WORKFLOWS.md with pipeline details - New PIPELINE_QUICK_REFERENCE.md for quick reference - Updated all docs to use generic placeholders - Added security/privacy section to README 🔐 Security Enhancements: - Updated .gitignore for all sensitive files - Created PII verification script (verify-pii-removal.sh) - Created cleanup automation script (cleanup-pii.sh) - Repository verified PII-free and production-ready BREAKING: Repository now requires .env configuration - Copy .env.example to .env and configure for your environment - Set GitHub repository secrets for CI/CD workflows - All deployments now use environment-specific configuration
This commit is contained in:
28
.gitignore
vendored
28
.gitignore
vendored
@@ -55,10 +55,36 @@ pids
|
||||
*.pid
|
||||
*.seed
|
||||
*.pid.lock
|
||||
|
||||
cleanup-*
|
||||
# Coverage directory used by tools like istanbul
|
||||
coverage/
|
||||
|
||||
# Build outputs
|
||||
dist/
|
||||
build/
|
||||
|
||||
# Personal Information (PII) and sensitive files
|
||||
# These files may contain personal domains, emails, or secrets
|
||||
*.personal
|
||||
*.private
|
||||
personal-*
|
||||
private-*
|
||||
|
||||
# Any files with actual domain/email configurations
|
||||
# (should use .env instead)
|
||||
actual-domains.txt
|
||||
domain-config.txt
|
||||
email-config.txt
|
||||
|
||||
# Generated files from environment substitution
|
||||
*.env.resolved
|
||||
*.resolved.yaml
|
||||
*.resolved.yml
|
||||
|
||||
# Temporary files from cleanup/setup scripts
|
||||
*.tmp
|
||||
*.temp
|
||||
cleanup-*.log
|
||||
setup-*.log
|
||||
|
||||
verify-*
|
||||
Reference in New Issue
Block a user