This repo is meant to be safe to share and used as a reference only.

• No real IP ranges or DNS names.
• No tenant, subscription, or object IDs.
• No kubeconfig files or cluster credentials.
• No secrets, tokens, or certificates.
• Only placeholder names in manifests and Bicep.

In a real environment:

• Store secrets in a secret manager (Key Vault, external secrets operator, etc.).
• Use managed identities for Azure resource access where possible.
• Configure Flux to reference secrets without committing them to Git.
• Use CI/CD variables and secret stores (not plain YAML) for sensitive values.

The redaction badge in README.md means this template has been reviewed to avoid sensitive data.
If you adapt this for real use, you are responsible for reviewing your copy before pushing it to a public repo.