From 04c54a0abd5ef505f4d7e1d31bbcc5bcaf7841be Mon Sep 17 00:00:00 2001
From: Mike Place <mike.place@elastic.co>
Date: Mon, 13 Jul 2026 17:28:41 +0200
Subject: [PATCH 1/2] Add .gitignore protection against locally-created
 credential files

---
 .gitignore | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.gitignore b/.gitignore
index 118d953e53..cfc7fe8ab9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -78,3 +78,12 @@ cmake_install.cmake
 CMakeCache.txt
 CMakeFiles/
 cmake-build-*/
+
+# Local secrets and credentials -- never commit these
+.env
+.env.*
+*.pem
+*.key
+*credentials*
+*secret*
+kubeconfig

From 2dd0d6a26ef57944b33370fd2442a4983ee91dfa Mon Sep 17 00:00:00 2001
From: Ed Savage <ed.savage@elastic.co>
Date: Wed, 15 Jul 2026 11:20:27 +1200
Subject: [PATCH 2/2] Mirror credential/secret .gitignore patterns in
 .dockerignore

Keeps .dockerignore in sync with .gitignore (as its header requires) so the
same local secret file shapes are excluded from the Docker build context.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .dockerignore | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.dockerignore b/.dockerignore
index 8daed35809..7207b91f14 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -78,3 +78,12 @@ cmake_install.cmake
 CMakeCache.txt
 CMakeFiles/
 cmake-build-*/
+
+# Local secrets and credentials -- never commit these
+.env
+.env.*
+*.pem
+*.key
+*credentials*
+*secret*
+kubeconfig