Generating a node cerificate

Node certificate generation is a required configuration if LDAP authentication is used. The CFM Operator provides automatic certificate generation for the NiFi Registry by way of cert-manager Certificates to provide TLS protection to the WebUI as well as between the Registry and NiFis in the cluster. To configure NodeCertGen, a cert-manager Issuer or ClusterIssuer is required. A self-signed Issuer setup is good for development environments, while production environments should use a third-party authority or internal signing CAs.

spec:
  security:
    nodeCertGen:
      issuerRef:
        name: self-signed-ca-issuer
        kind: ClusterIssuer