AzureBlobIDBrokerCloudCredentialsProviderControllerService

Description:

Retrieves Azure cloud credentials from an IDBroker server based on a provided configuration file that contains the IDBroker-related settings (urls) and using a kerberos username/password.

Tags:

azure, cloud, credentials, provider

Properties:

In the list below, the names of required properties appear in bold. Any other properties (not in bold) are considered optional. The table also indicates any default values, and whether a property supports the NiFi Expression Language.

Display NameAPI NameDefault ValueAllowable ValuesDescription
Storage Account Namestorage-account-nameThe storage account name. There are certain risks in allowing the account name to be stored as a flowfile attribute. While it does provide for a more flexible flow by allowing the account name to be fetched dynamically from a flowfile attribute, care must be taken to restrict access to the event provenance data (e.g. by strictly controlling the policies governing provenance for this Processor). In addition, the provenance repositories may be put on encrypted disk partitions.
Sensitive Property: true
Supports Expression Language: true (will be evaluated using flow file attributes and variable registry)
Common Storage Account Endpoint Suffixstorage-endpoint-suffixStorage accounts in public Azure always use a common FQDN suffix. Override this endpoint suffix with a different suffix in certain circumstances (like Azure Stack or non-public Azure regions).
Supports Expression Language: true (will be evaluated using flow file attributes and variable registry)
Configuration Resourcesconfig-resources/etc/hadoop/conf/core-site.xmlA file or comma separated list of files which contain IDBroker-related configurations in a Hadoop configuration format.

This property expects a comma-separated list of file resources.

Supports Expression Language: true (will be evaluated using variable registry only)
Usernameuser-nameThe Kerberos user name to use for accessing the IDBroker server
Supports Expression Language: true (will be evaluated using variable registry only)
PasswordpasswordPassword for the Kerberos user name to use for accessing the IDBroker server
Sensitive Property: true
Supports Expression Language: true (will be evaluated using variable registry only)
Connect Timeoutconnect-timeout10 sWait maximum this amount to finish establishing connection to IDBroker
Supports Expression Language: true (will be evaluated using variable registry only)
Credentials Retrieval Timeoutcredentials-retrieval-timeout10 sWait maximum this amount for credentials to arrive from IDBroker
Supports Expression Language: true (will be evaluated using variable registry only)

State management:

This component does not store state.

Restricted:

This component is not restricted.

System Resource Considerations:

None specified.