Every user has to authenticate themselves before using NiFI.
There are multiple options to set up the authentication of users.
All authentication related parameters are configured under
Single user allows the creation of one admin user for NiFi. This is a simple authentication method to quickly test and login to the canvas.
However, due to it being a single user with all rights, this is not recommended in production.
apiVersion: authentication.stackable.tech/v1alpha1 kind: AuthenticationClass metadata: name: simple-nifi-users (1) spec: provider: static: userCredentialsSecret: name: nifi-admin-credentials (2)
|1||The name of the
|2||The name of the
apiVersion: v1 kind: Secret metadata: name: nifi-admin-credentials (1) stringData: admin: admin (2) bob: bob (3)
|1||The name of the
|2||The user and password combination of the admin user. The username must be "admin" and cannot be changed. The NiFi pods will not start if they cannot mount the "admin" entry from the secret. The password can be adapted.|
|3||The secret maybe used by other products of the Stackable Data Platform that allow more than one user. The Stackable Operator for Apache NiFi will ignore all users except for "admin".|
spec: clusterConfig: authentication: - authenticationClass: simple-nifi-users (1)
|1||The reference to an
NiFi supports authentication of users against an LDAP server. This requires setting up an AuthenticationClass for the LDAP server. The AuthenticationClass is then referenced in the NifiCluster resource as follows:
apiVersion: nifi.stackable.tech/v1alpha1 kind: NifiCluster metadata: name: test-nifi spec: clusterConfig: authentication: - authenticationClass: ldap (1)
|1||The reference to an AuthenticationClass called
NiFi supports multiple authorization methods documented here. The available authorization methods depend on the chosen authentication method.
Authorization is not fully implemented by the Stackable Operator for Apache NiFi.