From cbd9818d2d16c50a5fa8bd943fb40489595243db Mon Sep 17 00:00:00 2001 From: Arsolitt Date: Wed, 20 May 2026 13:51:26 +0300 Subject: [PATCH] docs(kafka): correct tls.enabled default to null in README The field is tri-state (null/true/false): null means inherit from external. Showing false as the default was misleading. Assisted-By: Claude Signed-off-by: Arsolitt --- packages/apps/kafka/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/apps/kafka/README.md b/packages/apps/kafka/README.md index a896bbb5b..81734e3f0 100644 --- a/packages/apps/kafka/README.md +++ b/packages/apps/kafka/README.md @@ -10,7 +10,7 @@ | ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | ------- | | `external` | Enable external access from outside the cluster. | `bool` | `false` | | `tls` | TLS configuration. Strimzi manages the cluster PKI automatically (no cert-manager is involved for this chart): the operator auto-creates `-cluster-ca-cert` and `-clients-ca-cert` secrets, both exposed for client trust setup. The internal TLS listener on 9093 is always on; this toggle only controls the external listener on 9094. | `object` | `{}` | -| `tls.enabled` | Enable TLS on the external listener. When unset, inherits the value of `external` (TLS is on when external access is enabled). Warning: setting this to false while external is true exposes Kafka over plaintext on a public IP via LoadBalancer. Strimzi does not provide authentication on this listener unless SCRAM, mTLS, or OAuth is separately configured. Use only in controlled networks. | `bool` | `false` | +| `tls.enabled` | Enable TLS on the external listener. When unset, inherits the value of `external` (TLS is on when external access is enabled). Warning: setting this to false while external is true exposes Kafka over plaintext on a public IP via LoadBalancer. Strimzi does not provide authentication on this listener unless SCRAM, mTLS, or OAuth is separately configured. Use only in controlled networks. | `bool` | `null` | ### Application-specific parameters