diff --git a/workshop/demos/otel-discovery-demo/.gitignore b/workshop/demos/otel-discovery-demo/.gitignore
index 457f4600ab..8d4bfcfd89 100644
--- a/workshop/demos/otel-discovery-demo/.gitignore
+++ b/workshop/demos/otel-discovery-demo/.gitignore
@@ -1,2 +1 @@
-kafka*
 nohup.out
diff --git a/workshop/demos/otel-discovery-demo/src/riskservice/kafka.js b/workshop/demos/otel-discovery-demo/src/riskservice/kafka.js
new file mode 100644
index 0000000000..2adcd12aff
--- /dev/null
+++ b/workshop/demos/otel-discovery-demo/src/riskservice/kafka.js
@@ -0,0 +1,16 @@
+const { Kafka } = require('kafkajs')
+
+const { KAFKA_USERNAME: username, KAFKA_PASSWORD: password } = process.env
+const sasl = username && password ? { username, password, mechanism: 'plain' } : null
+const ssl = !!sasl
+
+// This creates a client instance that is configured to connect to the Kafka broker provided by
+// the environment variable KAFKA_BOOTSTRAP_SERVER
+const kafka = new Kafka({
+  clientId: 'risk-service',
+  brokers: [process.env.KAFKA_BROKER],
+  ssl,
+ sasl
+})
+
+module.exports = kafka