[
https://issues.apache.org/jira/browse/NIFI-5481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16891226#comment-16891226
]
Andy LoPresto commented on NIFI-5481:
-------------------------------------
We should also investigate Azure Key Vault [1] and Google Cloud KMS [2], as
well as a PKCS11 SoftHSM [3] provider.
[1] https://azure.microsoft.com/en-us/services/key-vault/?cdn=disable
[2] https://cloud.google.com/kms/
[3] https://www.opendnssec.org/softhsm/
> Add new providers of protected sensitive configuration values
> -------------------------------------------------------------
>
> Key: NIFI-5481
> URL: https://issues.apache.org/jira/browse/NIFI-5481
> Project: Apache NiFi
> Issue Type: New Feature
> Components: Configuration, Configuration Management, Core Framework,
> Security
> Affects Versions: 1.7.1
> Reporter: Andy LoPresto
> Assignee: Andy LoPresto
> Priority: Major
> Labels: configuration, encryption, kubernetes, security,
> toolkit, vault
>
> In order to make NiFi more dynamically scalable in conjunction with tools
> like Docker and Kubernetes, the "encrypted config" handling should be
> enhanced to integrate with other secure configuration providers. The original
> design encompassed this idea, and the {{SensitivePropertyProvider}} interface
> is designed to be extended by various provider implementations. A provider
> which integrates with the [Hashicorp Vault|https://www.vaultproject.io] is a
> good next step.
> Vault is free and open source, widely adopted, and provides a
> [CLI|https://www.vaultproject.io/docs/commands/index.html], [HTTP
> API|https://www.vaultproject.io/api/index.html], and community-supported Java
> client library [vault-java-driver - MIT
> License|https://github.com/BetterCloud/vault-java-driver] and [Spring Vault -
> Apache 2.0 License|https://github.com/spring-projects/spring-vault].
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
