[
https://issues.apache.org/jira/browse/NIFI-11650?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stephanie Ambrose updated NIFI-11650:
-------------------------------------
Description:
When deploying stateless NiFi in an environment like k8s, we have the
stateless.properties file as a configMap. We need to pass in the keystore
password, retrieved by the k8s secret (or environment variable). According to
the stateless documentation, this should be supported; however, it looks like
the ssl properties specifically don't allow for override. For example, I'm
trying to pass this in when running stateless from my deployment.yaml:
command:
["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p
\"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
Similarly to how the env-flow-config.properties file can reference environment
variables with env\{VAR_NAME}, the stateless.properties file should be able to
do the same.
The expected behavior would be that the nifi.stateless.security.keystorePasswd
property in stateless.properties would be updated by environment variables.
Documentation referenced here
([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
was:
When deploying stateless NiFi in an environment like k8s, we have the
stateless.properties file as a configMap. We need to pass in the keystore
password, retrieved by the k8s secret (or environment variable). According to
the stateless documentation, this should be supported; however, it looks like
the ssl properties specifically don't allow for override. For example, I'm
trying to pass this in when running stateless from my deployment.yaml:
command:
["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p
\"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
The expected behavior would be that the nifi.stateless.security.keystorePasswd
property in stateless.properties would be updated.
Documentation referenced here
([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
Summary: Stateless NiFi does not support ssl properties passed in from
environment variables (was: Stateless NiFi does not support ssl properties
passed in.)
> Stateless NiFi does not support ssl properties passed in from environment
> variables
> -----------------------------------------------------------------------------------
>
> Key: NIFI-11650
> URL: https://issues.apache.org/jira/browse/NIFI-11650
> Project: Apache NiFi
> Issue Type: Bug
> Affects Versions: 1.20.0
> Reporter: Stephanie Ambrose
> Priority: Major
>
> When deploying stateless NiFi in an environment like k8s, we have the
> stateless.properties file as a configMap. We need to pass in the keystore
> password, retrieved by the k8s secret (or environment variable). According to
> the stateless documentation, this should be supported; however, it looks like
> the ssl properties specifically don't allow for override. For example, I'm
> trying to pass this in when running stateless from my deployment.yaml:
> command:
> ["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p
> \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""]
> Similarly to how the env-flow-config.properties file can reference
> environment variables with env\{VAR_NAME}, the stateless.properties file
> should be able to do the same.
> The expected behavior would be that the
> nifi.stateless.security.keystorePasswd property in stateless.properties would
> be updated by environment variables.
>
> Documentation referenced here
> ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)]
>
>
> Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
