ooo it’s in the

consumerProperties

. Should have read further.

Another question, can I pass the dynamic variable to other params in the form of $var? example:

"consumerProperties": {
    "security.protocol": "SASL_SSL",
    "sasl.mechanism": "SCRAM-SHA-512",
    "sasl.jaas.config": "org.apache.kafka.common.security.scram.ScramLoginModule required username=\"$username\" password=\"$password\";"            
    "bootstrap.servers": "<http://broker-bootstrap.example.com:443|broker-bootstrap.example.com:443>",
    "druid.dynamic.config.provider": {
        "type": "environment",
        "variables": {
            "username": "USERNAME"
            "password": "PASSWORD"
        }
    }                
},

@kfaraz ^^

ah… I have to put the entire

sasl.jaas.config

in the dynamic environment.