Issuers, ClusterIssuers, and certificate policies.
HTTPS routing with Gateway API and cert-manager.
mTLS, SCRAM-SHA authentication, and ACLs for Kafka.