diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..71e546e
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,21 @@
+# Plain Secrets (Never commit)
+secrets/
+
+# Sealed Secrets public certificate (can regenerate)
+pub-cert.pem
+
+# Helm local package
+myapp/*.tgz
+
+# Helm dependency cache
+myapp/charts/
+
+# macOS
+.DS_Store
+
+# VS Code
+.vscode/
+
+# Vim
+*.swp
+*.swo