Blackbox http_2xx module rejects BasicAuth 401 — breaks SSL monitoring.
Blackbox http_2xx module rejects BasicAuth 401 — breaks SSL monitoring. External probes using http_2xx with valid_status_codes: [200, 301, 302] mark BasicAuth-protected endpoints as DOWN. Primary value is SSL cert expiry monitoring (probe_ssl_earliest_cert_expiry) which works regardless of status. Fix: add 401 to valid_status_codes in /opt/monitoring/blackbox/blackbox.yml.