Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-3388 Provide encrypted repository implementations
  3. NIFI-3722

Handle provenance repository encryption status change on startup

Attach filesAttach ScreenshotAdd voteVotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    Description

      If the provenance repository changes from encrypted -> unencrypted or vice-versa on startup, the application should handle the change.

      • Unencrypted -> encrypted: Attempt to create a EventIdFirstSchemaRecordReader instance to read the existing events into memory and write them back using EncryptedSchemaRecordWriter
      • Encrypted -> unencrypted: Attempt to create a EncryptedSchemaRecordReader instance to read the existing events into memory and write them back using EventIdFirstSchemaRecordWriter or ByteArraySchemaRecordWriter depending on the repository implementation class. This depends on the key(s) for the key IDs used still being available via nifi.properties.

      This process may be very slow given large existing repositories, so a standalone tool should also be made available to perform this process outside of the running app.

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            alopresto Andy LoPresto
            alopresto Andy LoPresto

            Dates

              Created:
              Updated:

              Slack

                Issue deployment