Try

.dockerignore

@@ -0,0 +1,23 @@
+# Folders to ignore
+.vscode
+**/__pycache__
+**/*.ipynb_checkpoints
+**/*Dockerfile*
+.tmp
+
+# Ignore any build folder
+./build*
+# Ignore the build cache
+./.cache
+
+# Ignore specific files
+docker/commands.sh
+*.egg-info/
+kafka-docker
+# Ignore env files
+**/*.env
+
+#Ignore the deployment configuration
+./kustomize/
+**/.venv
+**/.git

.gitignore

@@ -1,5 +1,7 @@
 ###### Place new entries directly below this line! ######
 
+kustomize/components/oidc-ca/*.crt
+
 # Ignore anything in the ./.tmp directory
 .tmp/
 
@@ -155,6 +157,11 @@ ENV/
 env.bak/
 venv.bak/
 
+# Env files
+*.env
+# but keep this one
+!kustomize/base/image-registry-credentials.env
+
 # Spyder project settings
 .spyderproject
 .spyproject
@@ -193,5 +200,16 @@ tags
 # Persistent undo
 [._]*.un~
 
+**/exploit-iq-ips.json
+**/user-feedback-ips.json
+**/google-sheets-secrets.yaml
+**/integration-tests-secrets.yaml
+**/server-model-config.yaml
+**/sec-decryption.key
+**/registry-app-creds.yaml
+**/exploit-iq-client-build-ips.yaml
+**/exploit-iq-automation-token.yaml
+
+
 
 # End of https://www.gitignore.io/api/vim,c++,cmake,python,synology

.gitmodules

@@ -0,0 +1,8 @@
+[submodule ".tests-automation"]
+	path = .tests-automation
+	url = https://github.com/RHEcosystemAppEng/exploitiq-tests-automation.git
+
+[submodule "exploit-iq-models"]
+	path = exploit-iq-models
+	url = https://github.com/RHEcosystemAppEng/exploit-iq-models.git
+

.tekton/cache-cleaner.yaml

@@ -0,0 +1,65 @@
+---
+# RBAC: The Tekton ServiceAccount (usually `pipeline`) needs `edit` (or a custom
+# Role) in target application namespaces to create/delete Jobs and mount PVCs
+# (e.g., exploit-iq-testings, exploit-iq-prod).
+apiVersion: tekton.dev/v1beta1
+kind: Task
+metadata:
+  name: generic-cache-cleaner
+spec:
+  description: >-
+    Purges application cache from a PVC by spawning a short-lived Job in the
+    target namespace, waiting for completion, and removing the Job.
+  params:
+    - name: pvc-name
+      type: string
+      description: Name of the PersistentVolumeClaim holding the cache.
+    - name: namespace
+      type: string
+      description: Target namespace where the PVC lives (e.g., exploit-iq-testings).
+  steps:
+    - name: create-cache-cleaner-job
+      image: image-registry.openshift-image-registry.svc:5000/openshift/cli:latest
+      script: |
+        #!/bin/sh
+        set -eu
+
+        oc apply -f - <<EOF
+        apiVersion: batch/v1
+        kind: Job
+        metadata:
+          name: cache-cleaner-job-$(params.pvc-name)
+          namespace: $(params.namespace)
+        spec:
+          template:
+            spec:
+              restartPolicy: Never
+              containers:
+                - name: cache-cleaner
+                  image: alpine:latest
+                  command:
+                    - /bin/sh
+                    - -c
+                    - 'rm -rf /data-to-clean/* && echo "Cache cleared successfully!"'
+                  volumeMounts:
+                    - name: cache-volume
+                      mountPath: /data-to-clean
+              volumes:
+                - name: cache-volume
+                  persistentVolumeClaim:
+                    claimName: $(params.pvc-name)
+        EOF
+
+    - name: wait-and-delete-cache-cleaner-job
+      image: image-registry.openshift-image-registry.svc:5000/openshift/cli:latest
+      script: |
+        #!/bin/sh
+        set -eu
+
+        oc wait --for=condition=complete \
+          "job/cache-cleaner-job-$(params.pvc-name)" \
+          -n "$(params.namespace)" \
+          --timeout=120s
+
+        oc delete "job/cache-cleaner-job-$(params.pvc-name)" \
+          -n "$(params.namespace)"