You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Chris Sampson (Jira)" <ji...@apache.org> on 2023/03/20 21:18:00 UTC
[jira] [Updated] (NIFI-11314) Load sensitive properties from files at startup
[ https://issues.apache.org/jira/browse/NIFI-11314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chris Sampson updated NIFI-11314:
---------------------------------
Description:
As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060 (abandoned), the idea of being able to provide sensitive values for properties at startup was introduced, e.g. the password for the NiFi Registry database could be provided in a file on the localhost.
This approach should be considered for NiFi components, particularly for use cases where configuration may otherwise be provided via environment variables and/or the nifi.properties file cannot easily be re-configured, e.g. when running as Docker Containers using the convenience Docker Images from Docker Hub.
Ability to provide such sensitive properties via file (and reference those files via environment variables) is something found in other well-known applications, e.g. Elasticsearch.
Consideration should be made as to whether the "Sensitive Property Providers" approach could be used here (at least for NiFi, although this capability should also be made available for NiFi Registry and MiNiFi where appropriate).
was:
As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060 (abandoned), the idea of being able to provide sensitive values for properties at startup was introduced, e.g. the password for the NiFi Registry database could be provided in a file on the localhost.
This approach should be considered for NiFi components, particularly for use cases where configuration may otherwise be provided via environment variables and/or the nifi.properties file cannot easily be re-configured, e.g. when running as Docker Containers using the convenience Docker Images from Docker Hub.
Ability to provide such sensitive properties via file (and reference those files via environment variables) is something found in other well-known applications, e.g. Elasticsearch.
> Load sensitive properties from files at startup
> -----------------------------------------------
>
> Key: NIFI-11314
> URL: https://issues.apache.org/jira/browse/NIFI-11314
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Chris Sampson
> Priority: Major
>
> As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060 (abandoned), the idea of being able to provide sensitive values for properties at startup was introduced, e.g. the password for the NiFi Registry database could be provided in a file on the localhost.
> This approach should be considered for NiFi components, particularly for use cases where configuration may otherwise be provided via environment variables and/or the nifi.properties file cannot easily be re-configured, e.g. when running as Docker Containers using the convenience Docker Images from Docker Hub.
> Ability to provide such sensitive properties via file (and reference those files via environment variables) is something found in other well-known applications, e.g. Elasticsearch.
> Consideration should be made as to whether the "Sensitive Property Providers" approach could be used here (at least for NiFi, although this capability should also be made available for NiFi Registry and MiNiFi where appropriate).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)