SSL access for api user support

[riccardo-salamanna]

Type of question

SSL access for api user support

Question

Our cluster is currently configured to have authentication via OIDC and it works fine but we would like to have a user for api access, authenticating via certificates. We followed the steps listed at https://orange-opensource.github.io/nifikop/docs/3_tasks/2_security/1_ssl#create-ssl-credentials, extrated the cert but we are still not able to authenticate with the provisioned user and the certificates that have been generated. Is there any step missing? thanks

Environment Environment

nifikop version: 0.7.1

Kubernetes version information: 1.19

Kubernetes cluster kind: EKS

NiFi version: 1.13.2

[solomonope]

@riccardo-salamanna please how did you get OIDC to work we are having the same issues with cert credentials

[riccardo-salamanna]

Well i followed the documentation on both nifi and nifikop to a T and oidc works amazing. What i was never able to do is to authenticate with a "standard" user (certificate)

https://medium.com/@alexandreguitton_12701/secured-nifi-cluster-with-nifikop-on-the-google-cloud-platform-3f7f84e363ed - this is pretty clear :)