exceptionfactory commented on PR #8105:
URL: https://github.com/apache/nifi/pull/8105#issuecomment-2111054120

   > @exceptionfactory @joewitt
   > 
   > I have added one more change, which will allow users to set amqp 
processor's password via env variables. I think this will be helpful in cases 
where we use AMQP processors in multiple NiFI instances. Instead of copying and 
pasting different passwords in processor properties, we can reference the env 
variable via its name. Let me know your thoughts on it. Thanks.
   
   Thanks for calling out this particular change @umarhussain15. Given the 
scope of the current pull request, I recommend considering that change 
separately.
   
   In general, sensitive properties such as passwords do not support reading 
from environment variables. The reason is that environment variables are also 
accessible through Expression Language, so they are not necessarily secure. The 
use case is still supported through Parameter Contexts and Parameter Providers, 
where the Environment Variable Parameter Provider can be used. This is an 
additional layer of indirection, but it follows the general convention for 
other sensitive properties.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to