Just published Part 3 - Exposing brokers outside k8s cluster securely (Mutual TLS Auth) and consuming Prometheus Metrics via Azure Monitor - https://medium.com/@agrajm/kafka-on-azure-kubernetes-service-part-2-a837889ecadc - Have a look !