fix(gitops): ignore wizard/make-generated artifacts in local env

[cyberantonz]

make deploy ENV=local's sync-clean step aborts on a fresh wizard run because the chain writes per-developer artifacts that aren't yet gitignored:

• environments/local/pub-cert.pem (make fetch-cert)
• environments/local/sealed-secrets//*-sealedsecret.yaml (make seal)

For real envs these are the gitops source of truth and must be committed; for the local sandbox they're regenerated by the wizard per-developer (same pattern as the already-gitignored environments/local/inventory.yaml). Narrow the ignore to environments/local/ only — other envs' sealed-secrets stay tracked.

Summary by CodeRabbit

• Chores
  • Updated gitignore rules to prevent accidental commits of local development artifacts and sensitive configuration files.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: fb10174a-74d4-4570-b1f6-162da6ecea11

📥 Commits

Reviewing files that changed from the base of the PR and between fab737d and b563168.

📒 Files selected for processing (1)

• deploy/gitops/.gitignore

---

📝 Walkthrough

Walkthrough

The deploy/gitops/.gitignore file is updated to expand ignore rules for the local sandbox environment. It adds explicit entries for environments/local/inventory.yaml, environments/local/pub-cert.pem, and environments/local/sealed-secrets/*/*-sealedsecret.yaml, along with comments clarifying these are wizard-/make-generated artifacts and that the sealed-secrets controller private key must never be committed.

Changes

Local environment .gitignore expansion

Layer / File(s)	Summary
Local artifact ignore entries and comments deploy/gitops/.gitignore	Replaces the prior brief ignore block with expanded commentary and explicit ignore patterns for the local inventory file, fetched public certificate, and sealed-secret manifests under environments/local/.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

A rabbit hops through gitignore land,
Tucking local secrets out of hand.
No certs, no keys, no sealed yaml in sight,
The repo stays tidy, clean, and bright.
🐇✨ Only committed things belong here tonight!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'fix(gitops): ignore wizard/make-generated artifacts in local env' directly and clearly summarizes the main change: adding gitignore rules for wizard/make-generated artifacts in the local environment.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}