Skip to content

NiFi 2.x removes support for deprecated encryption methods #791

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
lfrancke opened this issue May 8, 2025 · 2 comments · Fixed by #799
Closed

NiFi 2.x removes support for deprecated encryption methods #791

lfrancke opened this issue May 8, 2025 · 2 comments · Fixed by #799
Assignees
@maltesander
Labels
release/25.7.0 release-note Denotes a PR that will be considered when it comes time to generate release notes.

Comments

@lfrancke
Copy link
Member

lfrancke commented May 8, 2025 •
edited
Loading

NiFi 1.x has a list of two supported and six deprectated algorithms for sensitive properties.
NiFi 2.x removed all the deprecated ones.

  • Our operator needs to make sure to forbid the deprecated ones when a NiFi 2.x version is deployed
  • We also need to test/check/see what happens when the algorithm is changed during an upgrade from a deprecated one to a supported one and possibly document this
@maltesander maltesander self-assigned this May 21, 2025
@maltesander maltesander moved this to Development: In Progress in Stackable Engineering May 23, 2025
@maltesander maltesander mentioned this issue May 23, 2025
Merged
15 tasks
@maltesander maltesander moved this from Development: In Progress to Development: Waiting for Review in Stackable Engineering May 26, 2025
@adwk67 adwk67 moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering May 27, 2025
@maltesander maltesander moved this from Development: In Review to Development: Done in Stackable Engineering May 28, 2025
@lfrancke
Copy link
Member Author

Release notes please as this is potentially breaking

@lfrancke lfrancke moved this from Development: Done to Acceptance: In Progress in Stackable Engineering May 28, 2025
@maltesander
Copy link
Member

maltesander commented May 28, 2025 •
edited
Loading

I would not consider this breaking. Nothing changes for V1 and we do not allow to deploy any unsupported algorithms in V2?

The operator now emits a warning for deprecated sensitive property algorithms in NiFi version 1.x.x and errors out for version 2.x.x if an unsupported sensitive properties algorithm is used as described in the https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#property-encryption-algorithms[NiFi documentation].

@lfrancke lfrancke added release-note Denotes a PR that will be considered when it comes time to generate release notes. release/25.7.0 labels May 28, 2025
@lfrancke lfrancke moved this from Acceptance: In Progress to Done in Stackable Engineering May 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@maltesander maltesander

Labels
release/25.7.0 release-note Denotes a PR that will be considered when it comes time to generate release notes.
Projects
Stackable Engineering
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix and document changing sensitive properties algorithm stackabletech/nifi-operator
2 participants
@lfrancke @maltesander