[NIFI-2653] Encrypted configs should handle variable registry

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 1.0.0
• Component/s: Configuration, Tools and Build
• Labels: config encryption security
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 25/Aug/16 01:40
• Updated: 18/Sep/23 18:13
• Resolved: 18/Sep/23 18:13

Description

The encrypted configuration tool and internal logic to load unprotected values should handle sensitive values contained in the variable registry (perhaps with a unique/derived key for external containers).

Issue Links

• Is contained by: NIFI-5627 Improve handling of sensitive properties
• Is contained by: NIFI-5458 Improve NiFi TLS and certificate management
• is related to: NIFI-1831 Allow encrypted passwords in configuration files
• is related to: NIFI-1974 Support Custom Properties in Expression Language
• is related to: NIFI-2652 Handle multiple invocations of the encrypt-config tool
• relates to: NIFI-5270 my ftp password is "${password}" so nifi's LISTFtp won't use it.
• relates to: NIFI-3110 Allow template export to include variable registry references for sensitive values