[ 
https://issues.apache.org/jira/browse/NIFI-15910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18078783#comment-18078783
 ] 

ASF subversion and git services commented on NIFI-15910:
--------------------------------------------------------

Commit 2b383e1ac383330460bb68829c2e84046c0f94e2 in nifi's branch 
refs/heads/main from Kevin Doran
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=2b383e1ac38 ]

NIFI-15910 Improve Connector Secret verification (#11210)

* NIFI-15910 Improve Connector Secret verification

> Connector Verification fails for optional secret references
> -----------------------------------------------------------
>
>                 Key: NIFI-15910
>                 URL: https://issues.apache.org/jira/browse/NIFI-15910
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>            Reporter: Kevin Doran
>            Assignee: Kevin Doran
>            Priority: Minor
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> When a connector configuration contains a {{SECRET_REFERENCE}} that has only 
> {{valueType}} populated, with no {{secretName}} or 
> {{{}fullyQualifiedSecretName{}}}, framework verify and validate paths in 
> {{StandardConnectorNode}} try to resolve it against the secrets manager and 
> emit {{{}Property Validation - Secret Reference: The referenced secret [null] 
> could not be found{}}}. This is true even for optional or dependent 
> properties that might not actually be used by the connector if they don't 
> meet their dependencies. 
> h2. Fix
> In {{StandardConnectorNode.resolvePropertyReferences}} and the active-config 
> validation path:
>  * Skip secret resolution and validation for properties whose 
> {{ConnectorPropertyDependency}} is not satisfied.
>  * Skip secret resolution for structurally-empty {{SECRET_REFERENCE}} values 
> (no FQN and no secret name) and treat them as unset, so the connector's own 
> required-property check produces the actionable " is required" message 
> instead.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to