search

cetic / helm-nifi

Helm Chart for Apache Nifi
Apache License 2.0
215 stars 225 forks source link

[cetic/nifi] Make helm chart compatible with `apache/nifi >= 1.19.0` #313

Closed jrebmann closed 9 months ago

jrebmann commented 1 year ago

Problem description:

I like to run the latest apache/nifi container version 1.23.2 in my kubernetes cluster. The last working nifi version is 1.18.0.

Analysis:

Since apache/nifi 1.19.0 docker container uses java 11. When changing to this Java version there was a breaking change: The default keystore type changed from JKS to PKCS12. Source: https://bugs.openjdk.org/browse/JDK-8178828

This change causes cetic/helm-nifi to ignore all certificates set via cert-manager and caSecrets.

Solution:

Set the keystore type explicitly to JKS on importing the certificates by adding -storetype JKS or -deststoretype JKS to the keytool command.

The advantage of this solution is that it is backward compatible and thus works on for java 8.

jrebmann commented 1 year ago

I created a pull request https://github.com/cetic/helm-nifi/pull/314 to make it compatible with apache/nifi >= 1.19.0.

github-actions[bot] commented 10 months ago

This issue is stale because it has not seen recent activity. Remove stale label or comment or this will be closed.

jrebmann commented 10 months ago

The PR for this issue is essential to get in sync with the latest Apache NiFi versions.