anchor.diff:  
   == Additional resources
   
  -* For more information about the `KafkaUser` object, see xref:type-KafkaUser-reference[`KafkaUser` schema reference].+* For more information about the `KafkaUser` object, see xref:type-KafkaUser-reference[`KafkaUser` schema reference].
  +* For more information about the TLS Client Authentication, see xref:con-mutual-tls-authentication-{context}[].
  +* For more information about the SASL SCRAM-SHA-512 authentication, see xref:con-scram-sha-authentication-{context}[].
  
positive.code:   ca.crt: # Public key of the Clients CA
    user.crt: # Public key of the user
    user.key: # Private key of the user
  ----
  
  == Authorization
  
negative.code: 
  Authentication is configured using the `authentication` property in `KafkaUser.spec`.
  The authentication mechanism enabled for this user will be specified using the `type` field.
  Currently, the only supported authentication mechanisms are the TLS Client Authentication mechanism and the SCRAM-SHA-512 mechanism.
  
  When no authentication mechanism is specified, User Operator will not create the user or its credentials.
  
  