Configuring NiFi Registry binding

The NifiRegistryBinding is a Custom Resource watched by the Cloudera Flow Management Operator for Kubernetes which links a NiFi cluster to a NiFi Registry. It contains a required reference to a NiFi resource in the cluster and a required reference to either a NiFi Registry resource in the cluster or a URL to an existing NiFi Registry.

When the NifiRegistryBinding is created, Cloudera Flow Management Operator for Kubernetes will create a NiFi Registry Flow Client on the referenced NiFi cluster pointing at the referenced NiFi Registry. If a NiFi Registry reference is provided, the created NiFi Registry Flow Client will point to the NiFi Registry using its web Service. If a NiFi Registry URL is provided, that URL will be used directly.

When the NifiRegistryBinding is created by providing a NiFi Registry reference, Cloudera Flow Management Operator for Kubernetes will create a user on the NiFi Registry to represent the NiFi cluster and give it permission to proxy user requests. This is necessary for NiFi to initiate version control on a process group. The user on NiFi Registry will be named “CN=<NiFi resource name>, O=Cluster Node”, which corresponds to the NiFi Node Certificates generated by the operator.

When the NifiRegistryBinding is created by providing NiFi Registry URL, Cloudera Flow Management Operator for Kubernetes will take no action against the target NiFi Registry. You need to manually add the NiFi user to NiFi Registry for the NiFi cluster to proxy user requests.

You cannot make changes to an existing NifiRegistryBinding, you must delete and then recreate it.

When deleting NifiRegistryBinding, the NiFi Registry Flow Client will be deleted from the referenced NiFi cluster and the user representing the NiFi cluster on NiFi Registry will be deleted if a NiFi Registry was created by providing a reference.

apiVersion: cfm.cloudera.com/v1alpha1
kind: NifiRegistryBinding
metadata:
  name: bind
spec:
  nifiRef:
    name: nifi
    namespace: myflow
  nifiRegistryRef:
    name: registry
    namespace: registryns

Create your NifiRegistryBinding with the kubectl create -f [***/PATH/TO/BINDING.YAML***] command.