# BasicAuth Middleware referencing the same htpasswd content the
# ingress-nginx auth-secret annotation pointed at. The Secret
# (kubernetes/apps/monitoring/loki-basic-auth.sops.yaml) has both
# `auth` (nginx convention) and `users` (Traefik convention) keyed to
# the same htpasswd value — Traefik's BasicAuth Middleware reads `users`.
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: loki-basic-auth
  namespace: monitoring
spec:
  basicAuth:
    secret: loki-basic-auth
    realm: Loki