[NIFI-3723] Provide standalone tool to perform provenance repository encryption translation

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 1.2.0
• Component/s: Tools and Build
• Labels: encryption provenance security
• Assignee: Unassigned
• Reporter: Andy LoPresto
• Created: 21/Apr/17 01:00
• Updated: 03/Jan/24 03:08
• Resolved: 03/Jan/24 03:08

Description

The NiFi Toolkit should provide a standalone tool to handle translation of the provenance repository from encrypted -> unencrypted or vice-versa .

• Unencrypted -> encrypted: Attempt to create a EventIdFirstSchemaRecordReader instance to read the existing events into memory and write them back using EncryptedSchemaRecordWriter
• Encrypted -> unencrypted: Attempt to create a EncryptedSchemaRecordReader instance to read the existing events into memory and write them back using EventIdFirstSchemaRecordWriter or ByteArraySchemaRecordWriter depending on the repository implementation class. This depends on the key(s) for the key IDs used still being available via nifi.properties.

Issue Links

• is related to: NIFI-3722 Handle provenance repository encryption status change on startup
• relates to: NIFI-3594 Implement encrypted provenance repository