Thanks for the reply! I've set up ssh access to the repository, and I've
confirmed that it works by pushing commits on the terminal. However,
nifi-registry isn't performing the push automatically; the log file indicates
2019-03-28 15:48:19,029 ERROR [GitFlowMetaData Push thread]
o.a.n.r.p.flow.git.GitFlowMetaData Failed to push commits to origin due to
org.eclipse.jgit.api.errors.TransportException: ssh://git@<myrepo>.git:
USERAUTH fail
As per the instructions, I created a file at ${USER_HOME}/.ssh/config with a
Host entry and pointer to the key file, where ${USER} is the user running the
nifi registry service. Is there some additional setting that I need to make in
providers.xml? One thing, there's a passphrase associated with my key, could
that be causing the issue?
Thanks,
Dave
-----Original Message-----
From: Kevin Doran <[email protected]>
Sent: Thursday, March 28, 2019 12:20 PM
To: [email protected]
Subject: Re: NiFi registry - encrypt providers.xml?
This is not possible at this time. We recommend configuring your git repo so
that the remote and push using ssh key pairs of the NiFi Registry run-as user
and protecting the private key on disk. in other words, if on the linux host as
the user that nifi registry runs as, you should be able to push using ssh+git
instead of username / password. then NiFi Registry will be able to do the same.
On Thu, Mar 28, 2019 at 12:09 PM David Gallagher <[email protected]>
wrote:
>
> Hi – does anyone know if it is possible to somehow encrypt the providers.xml
> file? I’m using the Git persistence provider and want to store the remote
> user and password there, but I don’t want to leave that value in there
> unencrypted if I don’t have to. I downloaded the nifi-toolkit, but I don’t
> see it as an option.
>
>
>
> Thanks,
>
>
>
> Dave