# Dev clone checklist (terra-dev)

- Create and use branch: `dev/terra-dev`.
- Namespace: `terra-dev` (do not modify `terra`).
- Ingress host: `terr.kube5s.ru` (separate DNS/TLS secret).
- Terraform backend: use `terraform/backend-dev.hcl` (different bucket/key).
- Images: use dev tags (avoid pointing dev workloads to prod images/storage).
- Secrets: create dev-only secrets and credentials (do not copy prod secrets).
- Data: mirror S3 registry if needed (use `mc mirror` or registry mirror tools), or start with empty dev data.
- Apply with `kubectl apply -k k8s/overlays/dev`.
- Initialize terraform for dev: `terraform init -reconfigure -backend-config=terraform/backend-dev.hcl`.
- Confirm: no changes to `terra` namespace and no shared tfstate or storage pointing to prod.