diff --git a/asynchronous-api-guidelines/kafka-asynchronous-guidelines/l_security_schemes.md b/asynchronous-api-guidelines/kafka-asynchronous-guidelines/l_security_schemes.md index 120419f..0e5ebad 100644 --- a/asynchronous-api-guidelines/kafka-asynchronous-guidelines/l_security_schemes.md +++ b/asynchronous-api-guidelines/kafka-asynchronous-guidelines/l_security_schemes.md @@ -1,6 +1,8 @@ # Security Schemes -Specs **MAY** use security schemas to reflect the fact that the Kafka servers use mTLS. It is something quite static at the moment so the recommendation is reuse the ones specified in the reference spec. +Specs **MAY** use security schemas to reflect the fact that the Kafka servers use mTLS or SASL. It is something quite static at the moment so the recommendation is refer to reusable definitions + +Below example includes references to other security schemas used by the Kafka servers ```yaml channels: @@ -15,7 +17,15 @@ components: securitySchemes: ... consumerAcl: - type: X509 + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/consumerAcl' producerAcl: - type: X509 + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/producerAcl' + mtlsV1Server: + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/mtlsV1Server' + mtlsV2Server: + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/mtlsV2Server' + saslV1Server: + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/saslV1Server' + saslV2Server: + $ref: 'https://design.api.3stripes.io/v1/domains/adidas/cluster-landscape/1.0.0#/components/securitySchemes/saslV2Server' ```