SSL context controller service jks password property issue

konpyutaika / nifikop

The NiFiKop NiFi Kubernetes operator makes it easy to run Apache NiFi on Kubernetes. Apache NiFI is a free, open-source solution that support powerful and scalable directed graphs of data routing, transformation, and system mediation logic.

https://konpyutaika.github.io/nifikop/

Apache License 2.0

125 stars 42 forks source link

SSL context controller service jks password property issue #255

Closed narayanbhawar10 closed 1 year ago

narayanbhawar10 commented 1 year ago

Type of question

Best Practices

Support question

When We are migrating data flow to other new cluster then ssl controller service getting invalid, after debugging I found that one of the jks password property getting blank.So is it bug or I can handle that property in other way ?

NiFiKop version

Latest

Golang version

Latest

Kubernetes version

Latest

NiFi version

Latest

r65535 commented 1 year ago

Sensitive properties/values aren't persisted in NiFi registry/templates - so passwords aren't sent around in the clear.

To get around this, we use NiFi parameters as the password value in the SSLContextService: #{SSLPassword}

You can then set the SSLPassword parameter value in the NiFiParameterContext CRD