[NIFI-7203] Add support for ZooKeeper TLS

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.13.0
• Component/s: Core Framework, Security
• Assignee: Joey Frazee
• Reporter: Joey Frazee
• Created: 26/Feb/20 05:58
• Updated: 28/Apr/21 20:40
• Resolved: 25/Jan/21 13:47

Description

Currently the embedded ZooKeeper cannot be configured to use secure client access or quorum TLS because the ZooKeeperStateServer only sets a subset of properties, ignoring valid properties whether set in zookeeper.properties or elsewhere.

Issue Links

• is duplicated by: NIFI-7548 Nifi embedded secure zookeeper
• is related to: NIFI-7124 Improve experience configuring Zookeeper to support TLS
• is related to: NIFI-7115 Add Zookeeper TLS configuration to Administration Guide
• links to: GitHub Pull Request #4202
• links to: GitHub Pull Request #4207

Sub-Tasks

• Enable TLS for embedded Zookeeper when NiFi has TLS enabled: Resolved
• Make Zookeeper TLS Properties Available via nifi.properties: Resolved
• Add test for ZooKeeperStateServer: Resolved
• Add ZooKeeper client TLS to CuratorLeaderElectionManager: Resolved
• Add Zookeeper client TLS (external zookeeper) for cluster state management: Resolved