tls-toolkit code

statefulset.yaml

{{ if .Values.properties.clusterSecure }}
          ${NIFI_TOOLKIT_HOME}/bin/tls-toolkit.sh standalone -n "${FQDN}" \
            --clientCertDn "CN=${FQDN}, OU=NIFI" \
            --certificateAuthorityHostname ${FQDN} \
            --subjectAlternativeNames 'localhost{{- if .Values.properties.webProxyHost -}},{{ .Values.properties.webProxyHost }}{{- end -}}' \
            --outputDirectory "${NIFI_HOME}/conf/" \
            --isOverwrite

          KEYSTORE_PASSWORD=`grep keystorePasswd ${NIFI_HOME}/conf/${FQDN}/nifi.properties | awk 'BEGIN { FS = "=" } ; { print $2 }'`
          KEY_PASSWORD=`grep keyPasswd ${NIFI_HOME}/conf/${FQDN}/nifi.properties | awk 'BEGIN { FS = "=" } ; { print $2 }'`
          TRUSTSTORE_PASSWORD=`grep truststorePasswd ${NIFI_HOME}/conf/${FQDN}/nifi.properties | awk 'BEGIN { FS = "=" } ; { print $2 }'`

          mv ${NIFI_HOME}/conf/${FQDN}/*.jks ${NIFI_HOME}/conf/
          rm ${NIFI_HOME}/conf/${FQDN}/nifi.properties

          prop_replace nifi.security.keystorePasswd ${KEYSTORE_PASSWORD}
          prop_replace nifi.security.keyPasswd ${KEY_PASSWORD}
          prop_replace nifi.security.truststorePasswd ${TRUSTSTORE_PASSWORD}
{{- end }}