You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Stephanie Ambrose (Jira)" <ji...@apache.org> on 2023/06/07 13:08:00 UTC
[jira] [Updated] (NIFI-11650) Stateless NiFi does not support ssl properties passed in from environment variables
[ https://issues.apache.org/jira/browse/NIFI-11650?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stephanie Ambrose updated NIFI-11650:
-------------------------------------
Description:
When deploying stateless NiFi in an environment like k8s, we have the stateless.properties file as a configMap. We need to pass in the keystore password, retrieved by the k8s secret (or environment variable). According to the stateless documentation, this should be supported; however, it looks like the ssl properties specifically don't allow for override. For example, I'm trying to pass this in when running stateless from my deployment.yaml:
command:
["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
Similarly to how the env-flow-config.properties file can reference environment variables with env\{VAR_NAME}, the stateless.properties file should be able to do the same.
The expected behavior would be that the nifi.stateless.security.keystorePasswd property in stateless.properties would be updated by environment variables.
Documentation referenced here ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
was:
When deploying stateless NiFi in an environment like k8s, we have the stateless.properties file as a configMap. We need to pass in the keystore password, retrieved by the k8s secret (or environment variable). According to the stateless documentation, this should be supported; however, it looks like the ssl properties specifically don't allow for override. For example, I'm trying to pass this in when running stateless from my deployment.yaml:
command:
["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
The expected behavior would be that the nifi.stateless.security.keystorePasswd property in stateless.properties would be updated.
Documentation referenced here ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
Summary: Stateless NiFi does not support ssl properties passed in from environment variables (was: Stateless NiFi does not support ssl properties passed in.)
> Stateless NiFi does not support ssl properties passed in from environment variables
> -----------------------------------------------------------------------------------
>
> Key: NIFI-11650
> URL: https://issues.apache.org/jira/browse/NIFI-11650
> Project: Apache NiFi
> Issue Type: Bug
> Affects Versions: 1.20.0
> Reporter: Stephanie Ambrose
> Priority: Major
>
> When deploying stateless NiFi in an environment like k8s, we have the stateless.properties file as a configMap. We need to pass in the keystore password, retrieved by the k8s secret (or environment variable). According to the stateless documentation, this should be supported; however, it looks like the ssl properties specifically don't allow for override. For example, I'm trying to pass this in when running stateless from my deployment.yaml:
> command:
> ["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
> Similarly to how the env-flow-config.properties file can reference environment variables with env\{VAR_NAME}, the stateless.properties file should be able to do the same.
> The expected behavior would be that the nifi.stateless.security.keystorePasswd property in stateless.properties would be updated by environment variables.
>
> Documentation referenced here ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
>
> Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)