From c5aadd98f85e70d02c458cdebaab0a4b2ce47c8f Mon Sep 17 00:00:00 2001
From: rock <locartrock@gmail.com>
Date: Tue, 8 Sep 2026 15:29:42 -0700
Subject: [PATCH] chore: gitignore IAM provisioning scripts

---
 .gitignore | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitignore b/.gitignore
index 41df5d3..ffc2a33 100644
--- a/.gitignore
+++ b/.gitignore
@@ -66,3 +66,6 @@ bootstrap-argocd.log
 # one line here, which is how a plaintext deploy key reached a public remote.
 k8s/**/*-secret.yaml
 !k8s/**/*.enc.yaml
+
+# IAM provisioning scripts contain credential references — never commit
+scripts/iam/*.py