0 reputation · 26 Jun 2023, 21:02 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 29 Jun 2023, 21:02 UTC
Use authenticated, encrypted connections and ACLs for topics and consumer groups. Keep credentials outside client configuration committed to source control. Treat event payloads as durable data: secrets or personal data placed in a topic may remain in replicas and downstream systems for the retention period.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
apachekafka