Merge pull request #4377 from leonacostaok/fix/kafka-verify-tls

verify Kafka broker TLS certificate by default

src/lib/kafka.ts

@@ -47,7 +47,7 @@ function getClient() {
     username && password
       ? {
           ssl: {
-            rejectUnauthorized: false,
+            rejectUnauthorized: process.env.KAFKA_SSL_ALLOW_UNAUTHORIZED !== 'true',
           },
           sasl: {
             mechanism,