GcpSecretManagerParameterProvider 2.0.0

Bundle
org.apache.nifi | nifi-gcp-nar
Description
Fetches parameters from GCP Secret Manager. Each secret becomes a Parameter, which can be mapped to a Parameter Group by adding a GCP label named 'group-name'.
Tags
gcp, manager, secret
Input Requirement
Supports Sensitive Dynamic Properties
false
  • Additional Details for GcpSecretManagerParameterProvider 2.0.0

    GcpSecretManagerParameterProvider

    Mapping GCP Secrets to Parameter Contexts

    The GcpSecretManagerParameterProvider maps a Secret to a Parameter, which can be grouped by adding a “group-name” label. To create a compatible secret from the GCP Console:

    1. From the Secret Manager service, click the “Create Secret” button
    2. Enter the Secret name. This is the name of a parameter. Enter a value.
    3. Under “Labels”, add a label with a Key of “group-name” and a value of the intended Parameter Group name.

    Alternatively, from the command line, run a command like the following:

    printf "[Parameter Value]" | gcloud secrets create --labels=group-name="[Parameter Group Name]" "[Parameter Name]" --data-file=-

    In this example, [Parameter Group Name] should be the intended name of the Parameter Group, [Parameter Name] should be the parameter name, and [Parameter Value] should be the value of the parameter.

    Configuring the Parameter Provider

    GCP Secrets must be explicitly matched in the “Group Name Pattern” property in order for them to be fetched. This prevents more than the intended Secrets from being pulled into NiFi.

Properties