Upgrading CFM

To upgrade to the latest version of CFM, you must make note of and update some security password values, update the CSD files, restart the SCM Server, deactivate your old parcel and activate the new CFM parcel, and then restart your CFM services.

  1. Get the nifi.sensitive.props.key value from one of the NiFi nodes you have installed:
    cd /var/run/cloudera-scm-agent/process/ \ 
    && find . -name config.zip \
    | grep "NIFI_NODE" \
    | cut -c 3- \
    | sort -n \
    | tail -1 \
    | xargs unzip -p \
    | grep -A1 "<name>random.nifi.sensitive.props.key" \
    | grep -Po "(?<=<value>)[^<]+" 

  2. Stop NiFi, NiFi Registry, and NiFi CA Service in this order.
  3. Remove flow.xml.gz from all nodes except the one from which you obtained the nifi.sensitive.props.key value.
    var/lib/nifi/ is the default location for flow.xml.gz, but file location is configurable using the nifi.working.directory property in the NiFi configuration file.
  4. Delete the old CSDs and download the new ones. The default CSD location is /opt/cloudera/csd, but you can configure that location from Cloudera Manager Admnistration | Settings | Local Descriptor Repository Path. Ensure that you maintain the appropriate file ownership and access attributes and SELinux permissions if needed.
  5. Restart the cloudera-scm-server service:
    service cloudera-scm-server restart
  6. In Cloudera Manager, select cluster, then select NiFi from drop down, then select the Configuration tab. Then use the search box to find the Sensitive Properties Key value. Copy the sensitive properties key value that you got from step one and paste into this box. The minimum length is 12 digits.
  7. Set the following additional NiFi passwords to randomly generated values.
    • nifi.master.key.password
    • nifi.security.truststorePasswd
    • nifi.security.keystorePasswd

      This value must be the same as nifi.security.keyPasswd.

    • nifi.security.keyPasswd
  8. Update the following NiFi Registry configurations with random values for the following fields:
    • nifi.registry.master.key.password
    • nifi.registry.security.truststorePasswd
    • nifi.registry.security.keyPasswd
    • nifi.registry.security.keystorePasswd

      keystorePasswd must have the same value as keyPasswd.

  9. In Cloudera Manager, upgrade CFM by activating the CFM 1.0.1 parcel.
    After clicking Activate, the Activate CFM 1.0.1.0 on <cluster-name> pop-up displays. Click Activate Only, and then OK.
  10. Restart NiFi CA Service, NiFi Registry and NiFi, and deploy the client configurations.
  11. Remove 1.0.0.0 parcels from host. (optional cleanup step). From Parcel menu, go to the CFM 1.0.0.0 parcel, and select Remove From Host. Then select Delete.