[NIFI-8445] Implement Hashicorp VaultCommunicationService

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.14.0
• Assignee: Joe Gresock
• Reporter: Joe Gresock
• Created: 20/Apr/21 12:01
• Updated: 14/May/21 17:42
• Resolved: 14/May/21 17:42

Description

Suggest using Spring's VaultTemplate to expose an initial set of Vault-related methods that can be later expanded. 

Should take the following configuration:

1. Vault address (e.g., https://localhost:8200)
2. TLS configuration (used only if address is https)
3. Properties file location for configuring Vault Authentication Method

Should expose the initial methods:

• encrypt(String transitKey, byte[] plainText)
• decrypt(String transitKey, String cipherText)

This service should be able to be used initially in the NiFi core code and Encrypt-Config tool code, and should eventually be made available to the NiFi Registry code.

Issue Links

• is required by: NIFI-8447 Add HashiCorp Vault encryption as an option in the Encrypt Tool
• links to: GitHub Pull Request #5034