Clément Désiles 7972fe09ad security: deploy pod manifests containing credentials with mode 0600 ...

gitea.yaml, immich.yaml, and metabase.yaml embed database passwords in
env vars; per repo policy, rendered files containing secrets must not
be world-readable.

2026-07-04 00:06:29 +02:00

..

main.yml

security: deploy pod manifests containing credentials with mode 0600

2026-07-04 00:06:29 +02:00