feat: kafka mTLS (#5449)

* feat: kafka mTLS

* nit

* update ee repo ref

backend/ee-repo-ref.txt

@@ -1 +1 @@
-4cc7a978cd25367dc001cd0f5fe523ae7ea94b5f
+36158ddebc1b77f47380d6bba59d70bc6d18b653

frontend/src/lib/components/triggers/kafka/KafkaTriggersConfigSection.svelte

@@ -76,16 +76,42 @@
 					{
 						type: 'object',
 						title: 'SSL',
+						order: ['ca', 'certificate', 'key', 'key_password'],
 						properties: {
 							label: {
 								enum: ['SSL'],
 								type: 'string'
+							},
+							ca: {
+								type: 'string',
+								description: 'CA certificate to verify the server certificate, in PEM format'
+							},
+							certificate: {
+								type: 'string',
+								description: 'Client certificate for authentication to the server, in PEM format'
+							},
+							key: {
+								type: 'string',
+								description: 'Client key for authentication to the server, in PEM format'
+							},
+							key_password: {
+								type: 'string',
+								description: 'Password to decrypt the client key, if encrypted',
+								password: true
 							}
 						}
 					},
 					{
 						type: 'object',
-						order: ['mechanism', 'username', 'password'],
+						order: [
+							'mechanism',
+							'username',
+							'password',
+							'ca',
+							'certificate',
+							'key',
+							'key_password'
+						],
 						title: 'SASL_SSL',
 						required: ['mechanism', 'username', 'password'],
 						properties: {
@@ -104,6 +130,23 @@
 								enum: ['PLAIN', 'SCRAM-SHA-256', 'SCRAM-SHA-512'],
 								type: 'string',
 								disableCreate: true
+							},
+							ca: {
+								type: 'string',
+								description: 'CA certificate to verify the server certificate, in PEM format'
+							},
+							certificate: {
+								type: 'string',
+								description: 'Client certificate for authentication to the server, in PEM format'
+							},
+							key: {
+								type: 'string',
+								description: 'Client key for authentication to the server, in PEM format'
+							},
+							key_password: {
+								type: 'string',
+								description: 'Password to decrypt the client key, if encrypted',
+								password: true
 							}
 						}
 					}