Hi Yildiray, NiFi 1.14.0 introduced a change to require the Sensitive Properties Key [nifi.sensitive.props.key] in nifi.properties. For new installations of standalone nodes, NiFi will generate a random value automatically, but clustered configurations require setting the value explicitly. The Sensitive Properties Key can be specified using the following environment variable when running in Docker: NIFI_SENSITIVE_PROPS_KEY. The value must be the same on all clustered nodes.
Regards, David Handermann On Thu, Aug 5, 2021 at 6:20 AM Yildiray Kabak <yildi...@srdc.com.tr> wrote: > Dear all, > > > > When I try to run the latest (1.14.0) docker image with the following > command I got “SensitivePropertyProtectionException”. Complete stack trace > in provided below. I will appreciate if you help me on this issue. > > > > Kind regards, > > > > PS: I don’t get the error with 1.13.2 version… > > > > *$> docker run --name nifi -p 8443:8443 -e > SINGLE_USER_CREDENTIALS_USERNAME=admin -e > SINGLE_USER_CREDENTIALS_PASSWORD=ctsBtRBKHRAx69EqUghvvgEvjnaLjFEB -e > NIFI_CLUSTER_IS_NODE=true -e NIFI_CLUSTER_NODE_PROTOCOL_PORT=8082 -e > NIFI_ZK_CONNECT_STRING=localhost:2182 -e NIFI_ELECTION_MAX_WAIT="1 min" > apache/nifi:latest* > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /home/nifi/.nifi-cli.nifi.properties > > replacing target file /home/nifi/.nifi-cli.nifi.properties > > replacing target file /home/nifi/.nifi-cli.nifi.properties > > replacing target file /home/nifi/.nifi-cli.nifi.properties > > replacing target file /home/nifi/.nifi-cli.nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > replacing target file /opt/nifi/nifi-current/conf/nifi.properties > > > > Java home: /usr/local/openjdk-8 > > NiFi home: /opt/nifi/nifi-current > > > > Bootstrap Config File: /opt/nifi/nifi-current/conf/bootstrap.conf > > > > Login Identity Providers Processed > [/opt/nifi/nifi-current/./conf/login-identity-providers.xml] > > > > NiFi running with PID 72. > > tail: cannot open '/opt/nifi/nifi-current/logs/nifi-app.log' for reading: > No such file or directory > > > > Java home: /usr/local/openjdk-8 > > NiFi home: /opt/nifi/nifi-current > > > > Bootstrap Config File: /opt/nifi/nifi-current/conf/bootstrap.conf > > > > 2021-08-05 11:15:41,023 INFO [main] org.apache.nifi.bootstrap.Command > Generating Self-Signed Certificate: Expires on 2021-10-04 > > tail: '/opt/nifi/nifi-current/logs/nifi-app.log' has appeared; following > new file > > 2021-08-05 11:15:42,401 INFO [main] org.apache.nifi.bootstrap.Command > Generated Self-Signed Certificate SHA-256: > 702564FEFC6719DDF44626134D77844FD70D2364F042612E4BAA2356B0541D87 > > 2021-08-05 11:15:42,416 INFO [main] org.apache.nifi.bootstrap.Command > Starting Apache NiFi... > > 2021-08-05 11:15:42,417 INFO [main] org.apache.nifi.bootstrap.Command > Working Directory: /opt/nifi/nifi-current > > 2021-08-05 11:15:42,417 INFO [main] org.apache.nifi.bootstrap.Command > Command: /usr/local/openjdk-8/bin/java -classpath > /opt/nifi/nifi-current/./conf:/opt/nifi/nifi-current/./lib/logback-core-1.2.3.jar:/opt/nifi/nifi-current/./lib/nifi-framework-api-1.14.0.jar:/opt/nifi/nifi-current/./lib/nifi-runtime-1.14.0.jar:/opt/nifi/nifi-current/./lib/javax.servlet-api-3.1.0.jar:/opt/nifi/nifi-current/./lib/log4j-over-slf4j-1.7.30.jar:/opt/nifi/nifi-current/./lib/nifi-property-utils-1.14.0.jar:/opt/nifi/nifi-current/./lib/nifi-api-1.14.0.jar:/opt/nifi/nifi-current/./lib/jul-to-slf4j-1.7.30.jar:/opt/nifi/nifi-current/./lib/nifi-nar-utils-1.14.0.jar:/opt/nifi/nifi-current/./lib/jcl-over-slf4j-1.7.30.jar:/opt/nifi/nifi-current/./lib/nifi-stateless-bootstrap-1.14.0.jar:/opt/nifi/nifi-current/./lib/logback-classic-1.2.3.jar:/opt/nifi/nifi-current/./lib/nifi-server-api-1.14.0.jar:/opt/nifi/nifi-current/./lib/jetty-schemas-3.1.jar:/opt/nifi/nifi-current/./lib/slf4j-api-1.7.30.jar:/opt/nifi/nifi-current/./lib/nifi-stateless-api-1.14.0.jar:/opt/nifi/nifi-current/./lib/nifi-properties-1.14.0.jar > -Dorg.apache.jasper.compiler.disablejsr199=true -Xmx512m -Xms512m > -Dcurator-log-only-first-connection-issue-as-error-level=true > -Djavax.security.auth.useSubjectCredsOnly=true > -Djava.security.egd=file:/dev/urandom -Dzookeeper.admin.enableServer=false > -Dsun.net.http.allowRestrictedHeaders=true -Djava.net.preferIPv4Stack=true > -Djava.awt.headless=true -Djava.protocol.handler.pkgs=sun.net.www.protocol > -Dnifi.properties.file.path=/opt/nifi/nifi-current/./conf/nifi.properties > -Dnifi.bootstrap.listen.port=38587 -Dapp=NiFi > -Dorg.apache.nifi.bootstrap.config.log.dir=/opt/nifi/nifi-current/logs > org.apache.nifi.NiFi > > 2021-08-05 11:15:42,439 INFO [main] org.apache.nifi.bootstrap.Command > Launched Apache NiFi with Process ID 105 > > 2021-08-05 11:15:42,755 INFO [main] org.apache.nifi.NiFi Launching NiFi... > > 2021-08-05 11:15:43,134 INFO [main] > o.a.n.p.AbstractBootstrapPropertiesLoader Determined default application > properties path to be '/opt/nifi/nifi-current/./conf/nifi.properties' > > 2021-08-05 11:15:43,140 INFO [main] > o.a.nifi.properties.NiFiPropertiesLoader Loaded 202 properties from > /opt/nifi/nifi-current/./conf/nifi.properties > > 2021-08-05 11:15:43,149 ERROR [main] > o.a.nifi.properties.NiFiPropertiesLoader Clustered Configuration Found: > Shared Sensitive Properties Key [nifi.sensitive.props.key] required for > cluster nodes > > 2021-08-05 11:15:43,151 ERROR [main] org.apache.nifi.NiFi Failure to > launch NiFi due to java.lang.IllegalArgumentException: There was an issue > decrypting protected properties > > java.lang.IllegalArgumentException: There was an issue decrypting > protected properties > > at org.apache.nifi.NiFi.initializeProperties(NiFi.java:346) > > at > org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:314) > > at > org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:310) > > at org.apache.nifi.NiFi.main(NiFi.java:302) > > Caused by: > org.apache.nifi.properties.SensitivePropertyProtectionException: Sensitive > Properties Key [nifi.sensitive.props.key] not found: See Admin Guide > section [Updating the Sensitive Properties Key] > > at > org.apache.nifi.properties.NiFiPropertiesLoader.getDefaultProperties(NiFiPropertiesLoader.java:220) > > at > org.apache.nifi.properties.NiFiPropertiesLoader.get(NiFiPropertiesLoader.java:209) > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > > at java.lang.reflect.Method.invoke(Method.java:498) > > at org.apache.nifi.NiFi.initializeProperties(NiFi.java:341) > > ... 3 common frames omitted > > > > > > *Yildiray Kabak, PhD.* > > Director of Engineering > > > > *Phone*: +90 (312) 210 1763 *Fax: *+90 (312) 210 1837 *Email*: > yildi...@srdc.com.tr > > > > SRDC Corp. ODTU Teknokent Silikon Blok Kat:1 No:16 06800 Ankara, TURKEY > > *www.srdc.com.tr <http://www.srdc.com.tr>* > > > > >
