docs: add note about prefixed kafka SSL configs (#8910)

confluentinc · Mar 21, 2022 · 027c66d · 027c66d
1 parent 336c690
commit 027c66d
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/docs/operate-and-deploy/installation/server-config/security.md b/docs/operate-and-deploy/installation/server-config/security.md
@@ -605,6 +605,16 @@ details, and instructions on how to create suitable trust stores, please
 refer to the
 [Security Guide](https://docs.confluent.io/current/security/index.html).
 
+To use separate trust stores for encrypted communication with {{ site.ak }}
+and external communication with ksqlDB clients, prefix the SSL truststore configs
+with `ksql.streams.`:
+
+```properties
+security.protocol=SSL
+ksql.streams.ssl.truststore.location=/etc/kafka/secrets/kafka.client.truststore.jks
+ksql.streams.ssl.truststore.password=confluent
+```
+
 ### Configure Kafka Authentication
 
 This configuration enables ksqlDB to connect to a secure Kafka cluster