Migrate NiFi Registry file-based policies

Provides information about and examples of migrating NiFi Registry file-based policies.

Edit the users.xml from the source cluster by removing source node users. Replace the users.xml on the NiFi Registry node with the modified users.xml. The default CFM 2.0.1 location is /var/lib/nifiregistry.

CFM NiFi Registry uses the CMUserGroupProvider, configured in the authorizers.xml file, and places all the NiFi node hostnames in the nifiregistry group. Edit the authorizations.xml from the source cluster by removing source node users from each policy they were assigned and replacing them with the nifiregistry group identifier.

For example, if HDF NiFi Registry had three NiFi node users on each of the Read/Write/Delete proxy policies:

<policy identifier="d59a54f7-6dd6-34ad-a279-a26ffdb9eef8" resource="/proxy" action="R">
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
            <user identifier="fd4f71d3-7b7c-3286-bec0-d42a752f1e0c"/>
            <user identifier="80ba71da-7789-3c7b-924f-041d598c8137"/>
            <user identifier="e32ed0da-e652-39e6-86db-48cfa3750a9f"/>
        </policy>
<policy identifier="287edf48-da72-359b-8f61-da5d4c45a270" resource="/proxy" action="W">
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
            <user identifier="fd4f71d3-7b7c-3286-bec0-d42a752f1e0c"/>
            <user identifier="80ba71da-7789-3c7b-924f-041d598c8137"/>
            <user identifier="e32ed0da-e652-39e6-86db-48cfa3750a9f"/>
        </policy>
<policy identifier="6dbdbffd-8a7d-32e1-ba3e-f600e6c69791" resource="/proxy" action="D">
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
            <user identifier="fd4f71d3-7b7c-3286-bec0-d42a752f1e0c"/>
            <user identifier="80ba71da-7789-3c7b-924f-041d598c8137"/>
            <user identifier="e32ed0da-e652-39e6-86db-48cfa3750a9f"/>
        </policy>

You should edit these policies with the following information for CFM 2.0.1:

<policy identifier="d59a54f7-6dd6-34ad-a279-a26ffdb9eef8" resource="/proxy" action="R">
            <group identifier="nifiregistry"/>
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
        </policy>
<policy identifier="287edf48-da72-359b-8f61-da5d4c45a270" resource="/proxy" action="W">
            <group identifier="nifiregistry"/>
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
        </policy>
<policy identifier="6dbdbffd-8a7d-32e1-ba3e-f600e6c69791" resource="/proxy" action="D">
            <group identifier="nifiregistry"/>
            <user identifier="21232f29-7a57-35a7-8389-4a0e4a801fc3"/>
        </policy>

Replace the authorizations.xml on the NiFi Registry node with the modified authorizations.xml . The default CFM 2.0.1 location is /var/lib/nifiregistry.

After you finish

When you have completed migrating NiFi Registry file-based policies, you may proceed to migrating NiFi state and custom components.