The initial import of a versioned flow and associated parameter context requires setting of sensitive values. This does however provide for rather simple configuration of a programmatically pushed flow to an instance and then all params, sensitive or otherwise set, and the flow run. As well as easy subsequent updates.
There is no work in the apache nifi community I am aware of to provide a central secrets storage solution. Thanks On Thu, Jan 30, 2020 at 4:34 PM Mark Bean <[email protected]> wrote: > When storing a version controlled process group in the NiFi Registry, the > relevant Parameter Context will get stored as well. Similarly, when a > different NiFi instance instantiates that process group from the Registry, > the instance creates the Parameter Context so it can be used by the > process group. > > However, if there are parameters in the context with values marked as > sensitive, then those values are 1) not stored in NiFi Registry and > therefore 2) no value is available on any instance pulling the process > group from the Registry. > > Is there work being done to bridge this gap? Are there any recommendations > on how to supply the sensitive values? > > Thanks, > Mark >
