Dev clone checklist (terra-dev)

Create and use branch: dev/terra-dev.
Namespace: terra-dev (do not modify terra).
Ingress host: terr.kube5s.ru (separate DNS/TLS secret).
Terraform backend: use terraform/backend-dev.hcl (different bucket/key).
Images: use dev tags (avoid pointing dev workloads to prod images/storage).
Secrets: create dev-only secrets and credentials (do not copy prod secrets).
Data: mirror S3 registry if needed (use mc mirror or registry mirror tools), or start with empty dev data.
Apply with kubectl apply -k k8s/overlays/dev.
Initialize terraform for dev: terraform init -reconfigure -backend-config=terraform/backend-dev.hcl.
Confirm: no changes to terra namespace and no shared tfstate or storage pointing to prod.