Triagic + Confluent / Kafka: ticket investigations over your infrastructure, read-only

• Ask Confluent / Kafka which import-worker pods restarted today and why
• In Confluent / Kafka, is the payments service running the version we deployed at 16:02?
• Pull the last 200 log lines from the failing container in Confluent / Kafka
• Which Confluent / Kafka workspace changed last week, and what did the plan touch?
• Is the consumer group for order events in Confluent / Kafka lagging, and by how much?

Triagic exposes every tool the Confluent / Kafka server annotates as read-only, and nothing else. An explicit allowlist of read tools passed to the server; produce-message, delete-topics and every create tool are dropped.

1. 1

   Mint a read-only credential in Confluent / Kafka

   Create a dedicated user or token that can only read. An explicit allowlist of read tools passed to the server; produce-message, delete-topics and every create tool are dropped.

2. 2

   Add it in the Triagic portal

   Integrations, then Add shared data source, then Confluent / Kafka.

   • Bootstrap servers: Comma-separated broker addresses, ports included.
   • Kafka API key: Confluent Cloud → Cluster → API keys. Keys are per-cluster.
   • Kafka API secret
3. 3

   Let a desktop pick it up

   Saving validates the shape of what you typed. The first desktop app to sync starts Confluent / Kafka locally and reports running or degraded with the error text.

Field-by-field setup, TLS options and the error table: Confluent / Kafka in the docs.

An explicit allowlist of read tools passed to the server; produce-message, delete-topics and every create tool are dropped.

Can Triagic change anything in Confluent / Kafka?

No. An explicit allowlist of read tools passed to the server; produce-message, delete-topics and every create tool are dropped. Give it a read-only credential as well, so the guarantee does not rest on one layer.

What do I need to connect Confluent / Kafka?

Bootstrap servers, Kafka API key, Kafka API secret. The desktop app on a member's machine starts the connection; the portal never holds a live process.

Does Confluent / Kafka cost extra?

No. Every connector is included in the seat price. Start a 14-day trial without a card.

• KubernetesRead pods, deployments, events, and logs. Only the server's read-only tools are enabled.
• DockerInspect containers, their logs, images, networks and volumes on a Docker engine. Read-only: the server's create, start, stop, remove, pull, push and build tools are not exposed.
• TerraformRead HCP Terraform workspaces, runs, plans, and state versions to see what infrastructure changed. Runs HashiCorp's official image via Docker.