Hi Team,

I am exploring secret management options in Apache NiFi 2.8.0 and would
like to understand whether NiFi supports retrieving passwords directly from
HashiCorp Vault KV during startup.

My use case is to store the following properties in Vault KV rather than in
nifi.properties:

- nifi.security.keystorePasswd
- nifi.security.keyPasswd
- nifi.security.truststorePasswd

The objective is to avoid storing these sensitive values in plain text on
the NiFi host while still allowing NiFi to access them during the
bootstrap/startup process.

I am specifically interested in startup configuration properties that are
required before the application is fully initialized.

Has anyone successfully configured NiFi 2.8.0 to retrieve these passwords
directly from HashiCorp Vault KV during startup? If so, are there any
recommended approaches, examples, or best practices for this use case?

Any guidance would be appreciated.

Thank you.

Reply via email to