With Java 21 as next LTS release probably launching in ~6 month and OpenJDK 11 active support ending in 6 month, I'd like to reraise the question:   When will cloudera support Java 17 for the CDP private cloud base? You have to remember that your customers also need some time to upgrade their clusters and upgrade the applications running on it. So do you really plan to have your support lagging 2 LTS releases behind the official Java LTS releases and let your customers use not actively maintained Java versions? ... View more

I know this post is rather old and probably no longer of interest for the original user, but as I faced the same or similar issue today and as it took me round about two hours to finally have a docker container with a running secured nifi-registry setup, I wanted to share what I was missing:   Besides the admin user for the registry, one must create at least *two* additional users in the registry. One user must match the running secured NiFi certificate issuer exactly (capital/lowercase and spaces) like: `CN=nifimain, OU=NIFI`. This one needs the general "Can proxy user requests" rights. The other user created must match exactly the user you use to login into your NiFi web UI. This should usually be another certificate issuer. In my case on local testing only, I setup a single-user-provider as authentication mechanism and chose `admin` as the username, so in the registry, I had to create a user called `admin` which I granted an access policy to the bucket I wanted to be able to read. Only with both of the users setup, I was able to see my bucket listed in the NiFi ui and start version control. ... View more