---
# Traefik BasicAuth middleware — strips auth before forwarding to Alloy
# Secret alloy-otlp-auth is synced from Vault via ExternalSecret (see external-secrets.yaml)
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: alloy-otlp-auth
  namespace: monitoring
spec:
  basicAuth:
    secret: alloy-otlp-auth