Re: Managing Secrets in NiFi Registry

2018-09-04 Thread Andy LoPresto
Jonathan, Bryan gave a really good response to this. As he mentioned, there has definitely been discussion about providing this feature and further securing the variable registry and the integration between NiFi and NiFi Registry. I’ve listed some open Jiras at the bottom which further

Re: Managing Secrets in NiFi Registry

2018-09-04 Thread Bryan Bende
Hello, You are correct that currently variables cannot be marked as sensitive, and for that reason they currently shouldn't be used to store sensitive values since they will be stored in plain-text in the flow.xml.gz and also in the versioned flows saved to registry. I do think the concept of

Managing Secrets in NiFi Registry

2018-09-04 Thread Jonathan Meran
Hello, I am looking for some guidance on managing sensitive property values for things such as credentials in a DBCPConnectionPool within the NiFi Registry Development Life Cycle. Currently we have rolled our own deployment tool in which we manage configuration files per environment (Dev, QA,