Ferenc Gerlits created MINIFICPP-2283:
-----------------------------------------
Summary: It should be possible to write encrypted sensitive
properties to the configuration directly
Key: MINIFICPP-2283
URL: https://issues.apache.org/jira/browse/MINIFICPP-2283
Project: Apache NiFi MiNiFi C++
Issue Type: Improvement
Reporter: Ferenc Gerlits
Assignee: Ferenc Gerlits
Create a new functionality in the {{encrypt-config}} binary: it should
* read the existing {{config.yml}} file;
* find all sensitive properties and prompt the user to enter a value for each;
* encrypt the new values and add them to {{config.yml}};
* write the updated {{config.yml}} to disk.
The type of {{config.yml}} (YAML or JSON) should not change.
This way, the user could create a {{config.yml}} file by hand, leaving the
values of the sensitive properties blank, then run {{encrypt-config}} to set
values for the sensitive properties -- without the sensitive properties ever
being written to disk in cleartext, even for a short time.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)