diff --git a/.gitignore b/.gitignore
index b2e8939..7c07527 100644
--- a/.gitignore
+++ b/.gitignore
@@ -35,3 +35,8 @@
 # NetBox token files
 .netbox-env
 .env
+
+# Octavia PKI artifacts - never commit
+overlays/octavia-pki.yaml
+octavia-pki/
+passphrase.txt
\ No newline at end of file