Module kafka_bus 

Kafka-wire connector (feature kafka), targeting Redpanda as the reference self-hosted broker (brief Module F). The event path uses rskafka; a statically linked librdkafka admin client provisions and verifies topic retention.

TLS/SASL comes from the environment so secured endpoints need no new constructor surface: AV_KAFKA_CA_FILE pins a root CA (PEM) and enables TLS on both the admin and event paths; AV_KAFKA_SASL_USERNAME / AV_KAFKA_SASL_PASSWORD enable SASL with the mechanism from AV_KAFKA_SASL_MECHANISM (SCRAM-SHA-256 by default — Redpanda’s native credential store — or SCRAM-SHA-512 / PLAIN). Credentials are only accepted together with TLS: PLAIN would ship the password in the clear, and even SCRAM without TLS is exposed to MITM relay. Use hostname (not bare-IP) broker endpoints with TLS: certificate verification runs against the dialed name, and IP-SAN support varies across rustls versions.

Structs

KafkaBus

Kafka/Redpanda bus.