[NIFI-7124] Improve experience configuring Zookeeper to support TLS

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.11.1
• Fix Version/s: 1.13.0
• Component/s: Configuration Management, Security
• Labels: TLS properties security zookeeper
• Assignee: Troy Melhase
• Reporter: Margot Tien
• Created: 10/Feb/20 23:22
• Updated: 29/Jan/21 22:41
• Resolved: 29/Jan/21 22:41

Description

Improve experience around configuring ZK (embedded and external) to support TLS now that the ZK version we include (3.5.x) supports TLS.

• Embedded ZK - allow for ZK to start with TLS, and NiFi/ZK should mutually trust each other (ie, certificates are in each other's truststore).
• External ZK - allow for `nifi.properties` to contain properties that allow NiFi to connect to it.

 

Issue Links

• relates to: NIFI-7203 Add support for ZooKeeper TLS
• relates to: NIFI-7115 Add Zookeeper TLS configuration to Administration Guide