[NIFI-8444] Add Hashicorp Vault Transit Encryption for NiFi Properties

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.14.0
• Component/s: Core Framework
• Labels: encryption security, vault
• Epic Link: HashiCorp Vault Integration
• Assignee: Joe Gresock
• Reporter: Joe Gresock
• Created: 20/Apr/21 11:52
• Updated: 25/Jun/21 03:15
• Resolved: 25/Jun/21 03:12

Description

Implement the following:

1. Add Vault's Transit Service as an alternative method to encrypt sensitive properties in NiFi configuration files in the Encrypt-Config Tool
2. Use Vault's Transit Service in a new Sensitive Property Provider to decrypt sensitive properties in NiFi configuration files that were encrypted by Vault

Issue Links

• duplicates: NIFI-6324 Add Hashicorp Vault SPP

Sub-Tasks

• Implement Hashicorp VaultCommunicationService: Resolved
• Refactor SensitivePropertiesProviderFactory: Resolved
• Add HashiCorp Vault encryption as an option in the Encrypt Tool: Resolved
• Add HashiCorpVaultTransitSensitivePropertiesProvider: Resolved