anchor.diff:  
   [id='proc-kafka-connect-mounting-volumes-{context}']
   
  -= Mounting Secrets as volumes
  += Mounting Secrets as volumes for connector configuration
   
  -You can create a Kubernetes Secret, mount it as a volume to Kafka Connect, and then use it to configure a Kafka Connect connector.
  +You can create a Kubernetes Secret, mount it as a volume to Kafka Connect,
  +and then use it to configure a Kafka Connect connector.
  +
  +Configuration providers allow you to load configuration values from external sources.
  +
  +In this procedure, a Secret named `mysecret` is mounted to a volume named `connector-config`.
  +The Kafka `FileConfigProvider` is given the alias `file`,
  +and used to read and extract database _username_ and _password_ property values from the file to use in the connector configuration.
   
   .Prerequisites
   
  
positive.code: spec:
    # ...
    config:
      config.providers: file
      config.providers.file.class: org.apache.kafka.common.config.provider.FileConfigProvider
    #...
    externalConfiguration:
      volumes:
        - name: connector-config
          secret:
            secretName: mysecret
  ----
  
  . Apply the changes to your Kafka Connect deployment.
  +
  Use `kubectl apply`:
  [source,shell,subs=+quotes]
  kubectl apply -f _your-file_
  
  . Configure your connector
  * If you are using the Kafka Connect HTTP REST interface, use the values from the mounted properties file in your JSON payload with connector configuration.
  
negative.code: +
  [source,json,subs="attributes+"]
  ----
  {
     "name":"my-connector",
     "config":{
        "connector.class":"MyDbConnector",
        "tasks.max":"3",
        "database": "my-postgresql:5432",
        "username":"${file:/opt/kafka/external-configuration/connector-config/connector.properties:dbUsername}", <1>
        "password":"${file:/opt/kafka/external-configuration/connector-config/connector.properties:dbPassword}", <2>
        # ...
     }
  }
  ----
  <1> Path to the username property value. The path takes the form `/opt/kafka/external-configuration/_SECRET-VOLUME-NAME_/_PROPERTIES-FILENAME:USERNAME-PROPERTY_`.
  <2> Path to the password property value. The path takes the form `/opt/kafka/external-configuration/_SECRET-VOLUME-NAME_/_PROPERTIES-FILENAME:PASSWORD-PROPERTY_`.
  
  * If you are using a `KafkaConnector` resource, use the values from the mounted properties file in the `spec.config` section of your custom resource.
  +
  For example:
  +
  [source,yaml,subs="attributes+"]
  