[ 
https://issues.apache.org/jira/browse/NIFI-5481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16916097#comment-16916097
 ] 

Troy Melhase commented on NIFI-5481:
------------------------------------

[~pvillard] thanks for the offer to help.  Could you help review?  I've added a 
sensitive property provider for GCP here:  
[https://github.com/apache/nifi/pull/3672/files#diff-ee6c27a47f8481e11ea83b56551930ca]

 

 

> Add new providers of protected sensitive configuration values
> -------------------------------------------------------------
>
>                 Key: NIFI-5481
>                 URL: https://issues.apache.org/jira/browse/NIFI-5481
>             Project: Apache NiFi
>          Issue Type: New Feature
>          Components: Configuration, Configuration Management, Core Framework, 
> Security
>    Affects Versions: 1.7.1
>            Reporter: Andy LoPresto
>            Assignee: Andy LoPresto
>            Priority: Major
>              Labels: configuration, encryption, kubernetes, security, 
> toolkit, vault
>
> In order to make NiFi more dynamically scalable in conjunction with tools 
> like Docker and Kubernetes, the "encrypted config" handling should be 
> enhanced to integrate with other secure configuration providers. The original 
> design encompassed this idea, and the {{SensitivePropertyProvider}} interface 
> is designed to be extended by various provider implementations. A provider 
> which integrates with the [Hashicorp Vault|https://www.vaultproject.io] is a 
> good next step. 
> Vault is free and open source, widely adopted, and provides a 
> [CLI|https://www.vaultproject.io/docs/commands/index.html], [HTTP 
> API|https://www.vaultproject.io/api/index.html], and community-supported Java 
> client library [vault-java-driver - MIT 
> License|https://github.com/BetterCloud/vault-java-driver] and [Spring Vault - 
> Apache 2.0 License|https://github.com/spring-projects/spring-vault]. 



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Reply via email to