question Re: Nifi - Vault integration in Support Questions

Nifi - Vault integration

rkul — Fri, 21 Apr 2023 16:09:00 GMT

Hi, I'm trying to connect nifi instance to HashiCorp Vault. As per instructions, I added HashiCorpVaultParameterProvider and StandardHashiCorpVaultClientService to my instance. I configured both of them and managed to fetch secrets from Vault to nifi. Right after I fetched secrets I was asked to create respective nifi context to work with fetched secrets. I created one and used in a couple of my processor groups simply by selecting context in "Process Group Parameter Context" dropdown. Secrets were accessable inside processor groups and worked fine. Then I updated secrets on the Vault side, and according to instructions I should have refetched them again using "HashiCorpVaultParameterProvider" but fetch icon did nothing. So new secrets were not come. In order to achieve this I had to drop created context and all related references in process groups. Only after these actions I managed to fetch new secrets again. So, it looks wierd because every time when I update something on vault side I have to recreate contexts and reselect new context in each user group. Is it expected behaviour? Is there any other proper way to work dynamically with Vault? Thanks

Re: Nifi - Vault integration

DianaTorres — Fri, 21 Apr 2023 15:34:52 GMT

@rkul Welcome to the Cloudera Community!

To help you get the best possible solution, I have tagged our NiFi experts @steven-matison @cotopaul @SAMSAL who may be able to assist you further

Please keep us updated on your post, and we hope you find a satisfactory solution to your query.

Re: Nifi - Vault integration

rkul — Tue, 25 Apr 2023 08:28:17 GMT

Hi, Thanks @DianaTorres

Any updates on this?

Re: Nifi - Vault integration

DianaTorres — Tue, 25 Apr 2023 17:42:31 GMT

Any insight here @MattWho ? Thanks!

Re: Nifi - Vault integration

rkul — Mon, 15 May 2023 07:52:09 GMT

Any updates?

Re: Nifi - Vault integration

joseomjr — Thu, 15 Jun 2023 05:00:00 GMT

What are you using Vault for specifically? Retrieving secrets for some other purpose? Anytime the built in processors don't or can't do what I need or want I've found scripted processors to be ideal.