You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
Optional whole-surface Basic Auth (HTTP_BASIC_AUTH=user:password):
when set, every request — embedded UI, API, /metrics — requires the
credentials; only /health and /ready stay open for orchestrator
probes. Browsers prompt natively and the UI inherits the credentials
with no changes; programmatic clients send the standard header from any
network. Unset keeps the open-reads model for private-networking
deployments. Constant-time comparison, boot-time validation, redacted
from the config printout.
