Created on 04-21-2023 06:37 AM - edited 04-21-2023 09:09 AM
Hi, I'm trying to connect nifi instance to HashiCorp Vault. As per instructions, I added HashiCorpVaultParameterProvider and StandardHashiCorpVaultClientService to my instance. I configured both of them and managed to fetch secrets from Vault to nifi. Right after I fetched secrets I was asked to create respective nifi context to work with fetched secrets. I created one and used in a couple of my processor groups simply by selecting context in "Process Group Parameter Context" dropdown. Secrets were accessable inside processor groups and worked fine. Then I updated secrets on the Vault side, and according to instructions I should have refetched them again using "HashiCorpVaultParameterProvider" but fetch icon did nothing. So new secrets were not come. In order to achieve this I had to drop created context and all related references in process groups. Only after these actions I managed to fetch new secrets again. So, it looks wierd because every time when I update something on vault side I have to recreate contexts and reselect new context in each user group. Is it expected behaviour? Is there any other proper way to work dynamically with Vault? Thanks
Created 04-21-2023 08:34 AM
@rkul Welcome to the Cloudera Community!
To help you get the best possible solution, I have tagged our NiFi experts @steven-matison @cotopaul @SAMSAL who may be able to assist you further
Please keep us updated on your post, and we hope you find a satisfactory solution to your query.
Regards,
Diana Torres,Created 04-25-2023 01:28 AM
Hi, Thanks @DianaTorres
Any updates on this?
Created 04-25-2023 10:42 AM
Any insight here @MattWho ? Thanks!
Regards,
Diana Torres,Created 05-15-2023 12:52 AM
Any updates?
Created 06-14-2023 10:00 PM
What are you using Vault for specifically? Retrieving secrets for some other purpose? Anytime the built in processors don't or can't do what I need or want I've found scripted processors to be ideal.