You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@nifi.apache.org by Christian Pfarr <z0...@pm.me> on 2021/06/24 18:17:37 UTC
Nifi Registry DatabaseUserGroupProvider and DatabaseAccessPolicyProvider
Hey Guys,
im working on a fully high available setup for nifi registry, so that i can run multiple registries behind a HAProxy.
We got it to work with DatabaseFlowPersistenceProvider and Postgres (also HA) as metadata database, but we have to configure all policies seperately on each registry.
Is there any plan to implement some sort of DatabaseUserGroupProvider and DatabaseAccessPolicyProvider like DatabaseFlowPersistenceProvider, so that the Registry can work really high available?
Do yo have another idea to sync the users.xml and authorizations.xml between the nodes?
Kindly regards,
z0ltrix
Re: Nifi Registry DatabaseUserGroupProvider and DatabaseAccessPolicyProvider
Posted by Christian Pfarr <z0...@pm.me>.
Hi Bryan,
oh many thanks for that...
I think we missed it because of our automation template for autorizers.xml of an older version. (we startet at 0.5.0)
Kind regards
\-------- Original-Nachricht --------
Am 24. Juni 2021, 20:31, Bryan Bende schrieb:
>
>
>
> Hello,
>
> This already exists and is shown in the authorizers.xml that comes by default...
>
> [https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml\#L50-L62][https_github.com_apache_nifi_blob_main_nifi-registry_nifi-registry-core_nifi-registry-resources_src_main_resources_conf_authorizers.xml_L50-L62]
>
> [https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml\#L286-L307][https_github.com_apache_nifi_blob_main_nifi-registry_nifi-registry-core_nifi-registry-resources_src_main_resources_conf_authorizers.xml_L286-L307]
>
> Thanks,
>
> Bryan
>
> On Thu, Jun 24, 2021 at 2:17 PM Christian Pfarr <z0...@pm.me> wrote:
> >
> > Hey Guys,
> >
> > im working on a fully high available setup for nifi registry, so that i can run multiple registries behind a HAProxy.
> >
> > We got it to work with DatabaseFlowPersistenceProvider and Postgres (also HA) as metadata database, but we have to configure all policies seperately on each registry.
> >
> > Is there any plan to implement some sort of DatabaseUserGroupProvider and DatabaseAccessPolicyProvider like DatabaseFlowPersistenceProvider, so that the Registry can work really high available?
> >
> > Do yo have another idea to sync the users.xml and authorizations.xml between the nodes?
> >
> > Kindly regards,
> > z0ltrix
> >
> >
> >
> >
>
[https_github.com_apache_nifi_blob_main_nifi-registry_nifi-registry-core_nifi-registry-resources_src_main_resources_conf_authorizers.xml_L50-L62]: https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml#L50-L62
[https_github.com_apache_nifi_blob_main_nifi-registry_nifi-registry-core_nifi-registry-resources_src_main_resources_conf_authorizers.xml_L286-L307]: https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml#L286-L307
Re: Nifi Registry DatabaseUserGroupProvider and DatabaseAccessPolicyProvider
Posted by Bryan Bende <bb...@gmail.com>.
Hello,
This already exists and is shown in the authorizers.xml that comes by default...
https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml#L50-L62
https://github.com/apache/nifi/blob/main/nifi-registry/nifi-registry-core/nifi-registry-resources/src/main/resources/conf/authorizers.xml#L286-L307
Thanks,
Bryan
On Thu, Jun 24, 2021 at 2:17 PM Christian Pfarr <z0...@pm.me> wrote:
>
> Hey Guys,
>
> im working on a fully high available setup for nifi registry, so that i can run multiple registries behind a HAProxy.
>
> We got it to work with DatabaseFlowPersistenceProvider and Postgres (also HA) as metadata database, but we have to configure all policies seperately on each registry.
>
> Is there any plan to implement some sort of DatabaseUserGroupProvider and DatabaseAccessPolicyProvider like DatabaseFlowPersistenceProvider, so that the Registry can work really high available?
>
> Do yo have another idea to sync the users.xml and authorizations.xml between the nodes?
>
> Kindly regards,
> z0ltrix
>
>
>
>