[ https://issues.apache.org/jira/browse/NIFI-11650?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stephanie Ambrose updated NIFI-11650: ------------------------------------- Description: When deploying stateless NiFi in an environment like k8s, we have the stateless.properties file as a configMap. We need to pass in the keystore password, retrieved by the k8s secret (or environment variable). According to the stateless documentation, this should be supported; however, it looks like the ssl properties specifically don't allow for override. For example, I'm trying to pass this in when running stateless from my deployment.yaml: command: ["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""] Similarly to how the env-flow-config.properties file can reference environment variables with env\{VAR_NAME}, the stateless.properties file should be able to do the same. The expected behavior would be that the nifi.stateless.security.keystorePasswd property in stateless.properties would be updated by environment variables. Documentation referenced here ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)] Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted. was: When deploying stateless NiFi in an environment like k8s, we have the stateless.properties file as a configMap. We need to pass in the keystore password, retrieved by the k8s secret (or environment variable). According to the stateless documentation, this should be supported; however, it looks like the ssl properties specifically don't allow for override. For example, I'm trying to pass this in when running stateless from my deployment.yaml: command: ["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""] The expected behavior would be that the nifi.stateless.security.keystorePasswd property in stateless.properties would be updated. Documentation referenced here ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)] Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted. Summary: Stateless NiFi does not support ssl properties passed in from environment variables (was: Stateless NiFi does not support ssl properties passed in.) > Stateless NiFi does not support ssl properties passed in from environment > variables > ----------------------------------------------------------------------------------- > > Key: NIFI-11650 > URL: https://issues.apache.org/jira/browse/NIFI-11650 > Project: Apache NiFi > Issue Type: Bug > Affects Versions: 1.20.0 > Reporter: Stephanie Ambrose > Priority: Major > > When deploying stateless NiFi in an environment like k8s, we have the > stateless.properties file as a configMap. We need to pass in the keystore > password, retrieved by the k8s secret (or environment variable). According to > the stateless documentation, this should be supported; however, it looks like > the ssl properties specifically don't allow for override. For example, I'm > trying to pass this in when running stateless from my deployment.yaml: > command: > ["/bin/sh", "-c", "/opt/nifi/nifi-current/bin/nifi-stateless.sh -c -p > \"nifi.stateless.security.keystorePasswd=${KEYSTORE_PASSWORD}\""] > Similarly to how the env-flow-config.properties file can reference > environment variables with env\{VAR_NAME}, the stateless.properties file > should be able to do the same. > The expected behavior would be that the > nifi.stateless.security.keystorePasswd property in stateless.properties would > be updated by environment variables. > > Documentation referenced here > ([https://github.com/apache/nifi/blob/main/nifi-stateless/nifi-stateless-assembly/README.md#passing-parameters)] > > > Chatted briefly w/ Joe Gresock to verify and requested a ticket be submitted. -- This message was sent by Atlassian Jira (v8.20.10#820010)