[
https://issues.apache.org/jira/browse/NIFI-14234?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Navneet Kaur updated NIFI-14234:
--------------------------------
Description:
Hey,
This request is to encrypt all the password/secret fields in the configuration
file.
Keeping AWS KMS integration or the other cloud provider support is good.
{code:java}
# AWS Sensitive Property Providers
#nifi.bootstrap.protection.aws.conf=./conf/bootstrap-aws.conf
# Azure Key Vault Sensitive Property Providers
#nifi.bootstrap.protection.azure.keyvault.conf=./conf/bootstrap-azure.conf
# GCP KMS Sensitive Property Providers
#nifi.bootstrap.protection.gcp.kms.conf=./conf/bootstrap-gcp.conf{code}
Interested fields to encrypt:
{code:java}
nifi.sensitive.props.key=
nifi.security.keystorePasswd=
nifi.security.keyPasswd=
nifi.security.truststorePasswd=
nifi.security.user.oidc.client.secret=
nifi.zookeeper.security.keystorePasswd=
nifi.zookeeper.security.truststorePasswd= {code}
Reference: https://issues.apache.org/jira/browse/NIFI-14001
> Requesting to encrypt clear passwords in configuration file
> -----------------------------------------------------------
>
> Key: NIFI-14234
> URL: https://issues.apache.org/jira/browse/NIFI-14234
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Navneet Kaur
> Priority: Critical
>
> Hey,
> This request is to encrypt all the password/secret fields in the
> configuration file.
> Keeping AWS KMS integration or the other cloud provider support is good.
>
> {code:java}
> # AWS Sensitive Property Providers
> #nifi.bootstrap.protection.aws.conf=./conf/bootstrap-aws.conf
> # Azure Key Vault Sensitive Property Providers
> #nifi.bootstrap.protection.azure.keyvault.conf=./conf/bootstrap-azure.conf
> # GCP KMS Sensitive Property Providers
> #nifi.bootstrap.protection.gcp.kms.conf=./conf/bootstrap-gcp.conf{code}
>
> Interested fields to encrypt:
> {code:java}
> nifi.sensitive.props.key=
> nifi.security.keystorePasswd=
> nifi.security.keyPasswd=
> nifi.security.truststorePasswd=
> nifi.security.user.oidc.client.secret=
> nifi.zookeeper.security.keystorePasswd=
> nifi.zookeeper.security.truststorePasswd= {code}
>
> Reference: https://issues.apache.org/jira/browse/NIFI-14001
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
