From d0a8941616fc9b3bcec91a1392045e65b233da19 Mon Sep 17 00:00:00 2001
From: Danny Burrow <burrow.d@outlook.com>
Date: Sat, 28 Mar 2026 18:58:27 +0100
Subject: [PATCH] docs: add missing Loki auth flags to README, fix py.typed
 packaging, bump 0.7.3

- Add --loki-user, --loki-password, --loki-token, --loki-tls-ca to
  README usage signature and flag reference table
- Declare py.typed in pyproject.toml package-data so the marker is
  included in built distributions
- Bump version to 0.7.3, update changelog
---
 CHANGELOG.md           | 7 +++++++
 README.md              | 6 ++++++
 hubble_audit2policy.py | 2 +-
 pyproject.toml         | 5 ++++-
 4 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4369b2d..defaa53 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.3] - 2026-03-28
+
+### Fixed
+
+- Add missing Loki auth flags (`--loki-user`, `--loki-password`, `--loki-token`, `--loki-tls-ca`) to README usage signature and flag reference table.
+- Declare `py.typed` in `pyproject.toml` `[tool.setuptools.package-data]` so the marker is included in built distributions.
+
 ## [0.7.2] - 2026-03-28
 
 ### Changed
diff --git a/README.md b/README.md
index 100e162..c73b6e5 100644
--- a/README.md
+++ b/README.md
@@ -155,6 +155,8 @@ hubble-audit2policy [-h] [-o OUTPUT_DIR] [-n NAMESPACE]
                     [--from {file,loki}] [--loki-url URL]
                     [--loki-query LOGQL] [--since DURATION]
                     [--until DURATION] [--loki-limit N]
+                    [--loki-user USER] [--loki-password PASSWORD]
+                    [--loki-token TOKEN] [--loki-tls-ca PATH]
                     [-v] [-V]
                     [flows_file]
 ```
@@ -181,6 +183,10 @@ hubble-audit2policy [-h] [-o OUTPUT_DIR] [-n NAMESPACE]
 | `--since DURATION` | How far back to query, e.g. `30m`, `2h`, `1d` (default: `1h`) |
 | `--until DURATION` | End of query window as duration before now (default: `0s` = now) |
 | `--loki-limit N` | Max entries per Loki request batch (default: `5000`) |
+| `--loki-user USER` | Username for Loki HTTP Basic authentication |
+| `--loki-password PASSWORD` | Password for Loki HTTP Basic authentication (used with `--loki-user`) |
+| `--loki-token TOKEN` | Bearer token for Loki (`Authorization: Bearer ...`) header |
+| `--loki-tls-ca PATH` | Path to a PEM CA certificate for verifying the Loki server (self-signed certs) |
 | `-v, --verbose` | Enable verbose logging |
 | `-V, --version` | Show version and exit |
 
diff --git a/hubble_audit2policy.py b/hubble_audit2policy.py
index 4bfd6a3..0e35bc2 100755
--- a/hubble_audit2policy.py
+++ b/hubble_audit2policy.py
@@ -8,7 +8,7 @@
 
 from __future__ import annotations
 
-__version__ = "0.7.2"
+__version__ = "0.7.3"
 __author__ = "noexecstack"
 __license__ = "Apache-2.0"
 
diff --git a/pyproject.toml b/pyproject.toml
index 2021f93..c71bb22 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "hubble-audit2policy"
-version = "0.7.2"
+version = "0.7.3"
 description = "Generate least-privilege CiliumNetworkPolicy YAML from Hubble flow logs."
 readme = "README.md"
 license = "Apache-2.0"
@@ -35,6 +35,9 @@ hubble-audit2policy = "hubble_audit2policy:main"
 Homepage = "https://github.com/noexecstack/hubble-audit2policy"
 Issues = "https://github.com/noexecstack/hubble-audit2policy/issues"
 
+[tool.setuptools.package-data]
+hubble_audit2policy = ["py.typed"]
+
 [tool.ruff]
 target-version = "py310"
 line-length = 100