Member since
01-11-2024
1
Post
0
Kudos Received
0
Solutions
01-11-2024
02:48 AM
Hi All, I am trying to secure NIFI with Keycloak based access control. I am able to set up the admin account and login successfully. Next step, I want to create a group access policy that will have most of the admin privileges, however not via UI. Is it possible to provide custom-authorizations.xml and custom-users.xml on NIFI Helm where i specify my group and policy for it and still keep the initial admin user being generated as well? So basically, the content of these custom files should be appended to the generated users.xml and authorizations.xml file. I tried couple of tricks and hacks such as mounting my custom file under the name users.xml and authorizations.xml , this will basically replace auto-generated users.xml and authorizations.xml , hence it does not include admin user but only the group/users I mentioned. I tried to manually add my admin user to the file as well but in this case, root process-group uuid needs to be specified in the policy which might change and unknown. <policy identifier="3d164d96-bf95-3c66-9b73-7554c0ad04f5" resource="/data/process-groups/138b1307-7a1d-4c0d-8120-ecdaa1741629" action="R"> <user identifier="admin"/> </policy> I tried to use wild cards such as /process-groups/* or just /process-groups to allow all the process groups to be read and written but doesnt work. This restricts admin to create a new process group etc. Any help is appreciated!!
... View more
Labels:
- Labels:
-
Apache NiFi