Glad you were able to get it working. Regarding the super user comment... I don't think it has to be a super user, but it has to be a user that has permissions to perform the action. For your example of "nifi pg-import" it would have to be a user that has write permission to the parent process group where you are importing. If you don't use a proxied entity and just the keystore, the NiFi user by default does not have write to any process groups, the servers only get /proxy and /controller, so you could go in and grant the server nodes permissions to other things, but by default it wouldn't work.
Regarding the slow execution... Currently you can only run 1 command or use interactive mode, but it could be a nice improvement to execute a series of commands using the one JVM instance. I would be curious to know which part is slow though, is it really that slow spinning up the JVM, or is the actual call to retrieve the buckets slow? On Wed, Oct 24, 2018 at 9:24 PM ara m. <arama...@gmail.com> wrote: > > D'oh. Thanks.. I forgot I'm spinning up jvm in the CLI. You'd think after a > week of troubleshooting NiFi<->Reg ssl I'd have thought of this. > > Let's just say I had some jvm flags to set of my own besides the debugging > one... > -Dcom.ibm.jsse2.overrideDefaultTLS=true > > Then I hit a few stumbles and worked through them. I am not sure why I > needed a super-user as a proxiedUser to get anything done. I should have > been able to use the user in the keystore, as it has permissions in NiFI, > but for some reason I was getting errors with "> nifi pg-import" code. > > The next thing to fix it seems like spinning up the JVM to run the tasks is > quite slow. Takes almost 20+ seconds to run one command like list-buckets. > Maybe I've to increase the memory for my container. > > There's no way to pass the cli several lines of commands to run? I know > there is benefits by using back-references for bucket and flow, which I kind > of lose when executing CLI commands from the outside. > > Still thank you very much for getting my head straight! > > > > -- > Sent from: http://apache-nifi-users-list.2361937.n4.nabble.com/
