mirrord-kafka

1# mirrord Kafka Splitting Configuration Skill
2 
3> **Which CRDs?** Kafka splitting is now configured with **`MirrordSplitConfig`** (which queues to split + how the app finds their names) and **`MirrordPropertyList`** (the Kafka client connection). These replace the deprecated `MirrordKafkaTopicsConsumer` + `MirrordKafkaClientConfig`, which still work for backward compatibility. **Generate the new resources for any new setup.** Only produce the deprecated ones if the user explicitly asks or is maintaining an existing deployment. Requires operator **3.170.0+** and CLI **3.221.0+**.
4 
5## Security Boundaries
6 
7> **IMPORTANT:** Follow these security rules for all operations in this skill.
8 
9- **No hardcoded credentials:** Never include actual SASL passwords, SSL key material, certificates, AWS keys, or any secret values in generated `MirrordPropertyList` YAML. Reference a Kubernetes Secret with `valueFrom.secretKeyRef` per property.
10- **Credential protection:** Never ask the user to share Kafka passwords, certificates, key material, or AWS credentials with the agent. Instruct them to create Kubernetes Secrets themselves and reference them by name.
11- **Secret creation guidance:** When telling the user to create a Secret, instruct `kubectl create secret generic ... --from-file=...` reading values from files (then delete the files). Do **not** suggest `--from-literal` for credential values — it exposes secrets in argv/shell history.
12…