docs

README.md

@@ -61,8 +61,8 @@ be used to debug an Aiven hosted kafka topic. `aiven get` command extracts the f
 puts them in `current` folder. The applied `aivenApplication` has a default `expireAt` and is set to 1 day.
 
 To gain access be sure to update
-your [topic](https://doc.nais.io/persistence/kafka/#creating-topics-and-defining-access) resource & ACLs and
-add `username` to your `Topic`.yaml ACLs and apply to your namespace.
+your [topic](https://doc.nais.io/persistence/kafka/#creating-topics-and-defining-access) resource & ACLs add `username`
+to your `Topic`.yaml ACLs and apply to your namespace.
 
 When secrets is extracted you can install and use [kcat](https://github.com/edenhill/kcat) (kcat is the project formerly
 known as kafkacat) in preferred way.

doc/nais-d.puml

@@ -2,12 +2,14 @@
 title nais-d
 
 actor developer as "Developer"
+control cli as "Cli"
 control kubernetes as "Kubernetes"
 control aivenator as "Aivenator"
 control kafkarator as "Kafkarator"
 boundary aiven as "Aiven"
 
-developer -> kubernetes : nais-d aiven my-user my-team
+developer -> cli : nais-d aiven my-user my-team
+cli -> kubernetes : add or update
 
 loop aivenator until success
 kubernetes -> aivenator : Protected AivenApplication resource created/updated
@@ -31,4 +33,9 @@ kafkarator -> kubernetes : Write back status and sync hash
 note right: RolloutComplete
 end
 
+developer -> cli : nais-d aiven get my-secret-name my-team
+cli -> kubernetes : extract credentials
+cli <- kubernetes : credentials
+developer <- cli : save to current
+
 @enduml