diff --git a/kubernetes/infrastructure/crowdsec/helmrelease.yaml b/kubernetes/infrastructure/crowdsec/helmrelease.yaml
index 81c55b15..d5cd5708 100644
--- a/kubernetes/infrastructure/crowdsec/helmrelease.yaml
+++ b/kubernetes/infrastructure/crowdsec/helmrelease.yaml
@@ -48,15 +48,18 @@ spec:
               key: key
 
     agent:
+      # The agent parses the ingress controller's access logs (read from
+      # the pod's stdout) to detect attacks. Repointed from the retired
+      # ingress-nginx (decommissioned 2026-05-17) to Traefik. The
+      # crowdsecurity/traefik collection bundles the matching log parser,
+      # so no separate PARSERS entry is needed.
       acquisition:
         - namespace: ingress
-          podName: ingress-nginx-controller-*
-          program: nginx
+          podName: traefik-*
+          program: traefik
       env:
         - name: COLLECTIONS
-          value: "crowdsecurity/nginx crowdsecurity/http-cve crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
-        - name: PARSERS
-          value: "crowdsecurity/nginx-logs"
+          value: "crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
 
     config:
       parsers: