How should I handle configuration and secrets in Apache Kafka?

Question

Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?

Tasadduq Burney · Accepted Answer

Use authenticated, encrypted connections and ACLs for topics and consumer groups. Keep credentials outside client configuration committed to source control. Treat event payloads as durable data: secrets or personal data placed in a topic may remain in replicas and downstream systems for the retention period.

How should I handle configuration and secrets in Apache Kafka?

1 answer

Your perspective belongs here.

0 question comments