[NIFI-6411] NiFi Registry - Support encrypted value for GitFlowPersistenceProvider Password

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Configuration, Tools and Build
• Assignee: Unassigned
• Reporter: Matt Hagenbuch
• Created: 01/Jul/19 19:12
• Updated: 01/Jul/19 19:12

Description

Currently the NiFi Toolkit encrypt-config tool has no documented support for the NiFi Registry "providers.xml" configuration file, which contains the GitFlowPersistenceProvider GitHub credentials.  If you attempt to use the encrypt-config tool passing the "-i" flag (for identityProviders.xml) and give it the providers.xml file, it does correctly encrypt the password for the GitFlowPersistenceProvider.  However, in practice NiFi Registry does not seem to attempt to decrypt the value, nor does the property support the "encryption" attribute.  It would be great to be able to encrypt this sensitive field using the encrypt-config tool.