[
https://issues.apache.org/jira/browse/NIFI-11314?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chris Sampson updated NIFI-11314:
---------------------------------
Description:
As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060 (abandoned),
the idea of being able to provide sensitive values for properties at startup
was introduced, e.g. the password for the NiFi Registry database could be
provided in a file on the localhost.
This approach should be considered for NiFi components, particularly for use
cases where configuration may otherwise be provided via environment variables
and/or the nifi.properties file cannot easily be re-configured, e.g. when
running as Docker Containers using the convenience Docker Images from Docker
Hub.
Ability to provide such sensitive properties via file (and reference those
files via environment variables) is something found in other well-known
applications, e.g. Elasticsearch.
Consideration should be made as to whether the "Sensitive Property Providers"
approach could be used here (at least for NiFi, although this capability should
also be made available for NiFi Registry and MiNiFi where appropriate).
was:
As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060 (abandoned),
the idea of being able to provide sensitive values for properties at startup
was introduced, e.g. the password for the NiFi Registry database could be
provided in a file on the localhost.
This approach should be considered for NiFi components, particularly for use
cases where configuration may otherwise be provided via environment variables
and/or the nifi.properties file cannot easily be re-configured, e.g. when
running as Docker Containers using the convenience Docker Images from Docker
Hub.
Ability to provide such sensitive properties via file (and reference those
files via environment variables) is something found in other well-known
applications, e.g. Elasticsearch.
> Load sensitive properties from files at startup
> -----------------------------------------------
>
> Key: NIFI-11314
> URL: https://issues.apache.org/jira/browse/NIFI-11314
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Chris Sampson
> Priority: Major
>
> As part of https://github.com/apache/nifi/pull/6995 for NIFI-7060
> (abandoned), the idea of being able to provide sensitive values for
> properties at startup was introduced, e.g. the password for the NiFi Registry
> database could be provided in a file on the localhost.
> This approach should be considered for NiFi components, particularly for use
> cases where configuration may otherwise be provided via environment variables
> and/or the nifi.properties file cannot easily be re-configured, e.g. when
> running as Docker Containers using the convenience Docker Images from Docker
> Hub.
> Ability to provide such sensitive properties via file (and reference those
> files via environment variables) is something found in other well-known
> applications, e.g. Elasticsearch.
> Consideration should be made as to whether the "Sensitive Property Providers"
> approach could be used here (at least for NiFi, although this capability
> should also be made available for NiFi Registry and MiNiFi where appropriate).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
